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Haunted  by  the  Past 


SPECIAL 

REPORT 

COMDEX 


The  survival  plan  that  Comdex  show  organizers 
came  up  with  earlier  this  year  -  to  recast  the 
event  as  one  strictly  focused  on  corporate  IT  - 
may  have  been  brilliant.  But  few  IT  professionals 
appear  to  have  gotten  the  message,  and  lingering 
perceptions  of  Comdex  as  an  unwieldy,  circuslike 
showcase  of  gadgets  and  consumer  goods  are 
keeping  many  of  you  and  your  vendors  away. 

Our  special  report  by  Todd  R.  Weiss  is  on  page  8. 


ARE  YOU  ATTENDING? 


YES 

31.1% 

NO, 

NO,  NEVER  HAVE 

BUT  HAVE  IN  THE  PAST  49.7% 

19.2% 


ONLINE  EXCLUSIVE:  Your  peers  weigh  in  on  Comdex: 

0  QuickLink  42527  www.computerworid.com 


Shippers  Face  Big  IT  Security 
Costs  but  See  Future  Savings 


Information  Life-cycle  Tools 
Appealing  but  Remain  Distant 


The  right  mix  of  tools 
would  boost  efficiency 

BY  DAN  VERTON 

NEW  YORK 

Private  port  operators  and 
shipping  companies  in  the  U.S. 
will  likely  be  expected  to  pay 
for  the  bulk  of  the  multibil- 
lion-dollar  effort  the  govern¬ 
ment  says  is  necessary  to  pro¬ 
tect  the  nation’s  global  supply 
chain  from  terrorist  attacks. 

But  they  may  find 
that’s  not  such  a 
heavy  burden.  The 
right  mix  of  IT-en¬ 
abled  security  mea¬ 
sures  could  turn  the 
short-term  expense 
into  long-term  sav¬ 


ings,  shipping  industry  repre¬ 
sentatives  said  last  week. 

The  debate  over  whether 
the  government  or  the  private 
sector  should  bear  the  costs 
associated  with  IT  security 
upgrades  for  the  nation’s  mar¬ 
itime  ports  —  which  security 
experts  say  represent  the 
biggest  vulnerability  to  terror¬ 
ist  attacks  involving  weapons 
of  mass  destruction  —  was  a 
central  theme  of  last  week’s 
Maritime  Security 
Expo  here. 

A  frequently  cited 
document  at  the 
event  was  a  recent 
United  Nations  re¬ 
port  that  put  the 
global  shipping  in¬ 


dustry’s  cost  for  security  this 
year  at  close  to  $2  billion.  And 
that  doesn’t  include  the  poten¬ 
tial  costs  of  retrofitting  the  ex¬ 
isting  worldwide  fleet  of  12 
million  shipping  containers  or 
building  new  “smart”  contain¬ 
ers  from  scratch. 

Most  shipping  industry  offi¬ 
cials  agreed  that  the  private 

Shippers,  page  16 


Better  interoperability 
a  first  step,  users  say 


BY  LUCAS  MEARIAN 

ORLANDO 

IT  managers  are  intrigued  by 
new  technology  designed  to 
automatically  manage  data 
from  creation  to  deletion.  But 
many  users  at  last  week’s  Stor¬ 
age  Networking  World  Fall 
2003  conference  here 
cautioned  that  so- 
called  information  life- 
cycle  management  ap¬ 
proaches  will  require 
years  of  development. 

To  make  the  new  concept 
work,  conference  attendees 
said,  vendors  will  have  to  inte¬ 
grate  storage  devices,  manage¬ 
ment  tools  and  business  appli¬ 
cations  and  develop  more  ro¬ 
bust  policy-based  engines  that 
can  dictate  how,  where  and  for 
how  long  data  gets  stored. 


Some  users  said  vendors 
should  first  concentrate  on 
making  their  existing  storage 
products  more  interoperable. 

James  Medeiros,  informa¬ 
tion  systems  and  services 
manager  at  United  Parcel  Ser¬ 
vice  Inc.,  said  he  has  yet  to  be 
convinced  that  Atlanta-based 
UPS  should  spend  money  on 
unproven  life-cycle  manage¬ 
ment  technologies  in  an  effort 
to  make  its  storage 
management  opera¬ 
tions  more  efficient. 

“As  much  as  I’m  out 
to  eliminate  multiven¬ 
dor  tool  sets  and  drive 
more  policy-based  manage¬ 
ment,  I  only  have  25  storage 
[technicians]  managing  that 
infrastructure,  compared  to 
4,700  IT  workers  overall,” 
Medeiros  said.  “I’ll  take  a  beat¬ 
ing  on  cost  before  I  take  a 
beating  on  reliability.” 

Life-cycle  Tools,  page  57 


|  -  Visit  our  Security 
Knowledge  Center  for 
complete  coverage:. 

J  .v  5L. .  ■ 
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Also  at  SNW 


IT  managers  talk 
about  what  keeps 
them  up  at  night: 

QuickLink  42476 


KEEPING 


VENDORS  ARE  RUSHING  TO 


offer  a  variety  of  products, 
from  content  checkers 
to  transaction  trackers,  in 
orderto  help  companies  prevent  leaks 
of  confidential  information  and  comply 
with  new  privacy  laws.  PAGE  25 
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known  and  unknown  threats — it  actually  prevents  them.  From  the  desktop,  to  the  network,  to  the  server,  the  McAfee"  Pro’tectton-m-Osppthi' 
and  our  proven  Intrusion  Prevention  technologies  provide  complete  protection  for  the  enterprise.  So  you  can  spend  less,' time  thinking  about 
issues  and  more  time  thinking  about  growth  issues.  Learn  more  today  at  start. mcafeesecurity.com 

Because  security  '  yt\ 


The  dawn  of  a  new  PC  era 


For  the  last  decade,  every  processor  chip  in  every  personal  computer  in 


the  world  has  been  based  on  32-bit  architecture.  It  was  the  best  technology 


we  had.  Until  today.  Introducing  the  revolutionary  PowerPC  G5  processor,the 

world's  first  64-bit  processor  for  personal  computers. 

Before  now,  a  chip  this  formidable 
could  only  be  found  in  the  world's 
fastest  servers  and  supercomputers.  Which  is  precisely 
The  world's  most  advanced  where  the  G5  chip  came  from.  Developed  by  IBM  and 

personal  computer  chips 

are  manufactured  in  the  Apple;  the  G5's  DNA  is  from  the  core  of  IBM's  highest- 

world's  most  advanced 

semiconductor  factory.  performance,  64-bit  POWER4  processor.  But  just  as 
impressive  as  the  G5's  pedigree  is  how  it's  manufactured.  In  IBM's  (and  the 


world's)  most  advanced  semiconductor  facility,  the  G5's  12-inch 
silicon  wafers  are  untouched  by  human  hands 
as  robots  guide  them  through  500 


The  64-bit  processor. 


processing  steps,  creating  58  million  transistors  and  connecting  them  with 
over  1000'  of  copper  wire  that's  less  than  1/800th  the  width  of  a  human  hair. 

The  new  PowerPC  G5  has  a  1 -gigahertz  frontside  bus*  that  moves  data 
in  and  out  of  the  processor  almost  twice  as  fast  as  the 
competition,  removing  a  key  bottleneck  that 
limits  performance.  And  it  can  support  more 
than  200  in-flight  instructions  at  a  time  -71  %  more  than 
the  32-bit  Pentium  4.  Perhaps  most  importantly,  the 
G5's  64-bit  architecture  can  address  dramatically  more 
memory  -  over  4  billion  times  more  than  32-bit  chips 
-  so  that  systems  built  around  the  G5  can  shatter  the  4-gigabyte  memory 
ceiling  that  limits  every  other  PC  on  earth.  The  64-bit  PowerPC  G5. 

It's  not  just  a  new  chip.  It's  the  next  chapter  in 
personal  computing. 


The  world's  first  64-bit  desktop 
processor  can  only  be  found 
here:  Inside  the  new  Power 
Mac -  G5,  the  world's  most 
powerful  personal  computer. 


The  Home  Depot  sees  the  possibilities  in  Samsung 


-  Super-bright,  razor-sharp 
19”  analog/digital  TFT/PVA  display 
1  Unique  dual-hinge  base  allows 
up  to  90°  tilt  for  optimal  efgdnO(nfts 
'  1230  x  1024,  Xtrawide™  1707170° 
viewing  angle,  VESA®  wall-mountable  base 
■  World’s  leading  manufacturer  of 
TFT-LCD  displays 


That’s  DigitAII  vision. 

How  do  you  become  the  fastest  growing  50  billion- 
doiiar  retailer  in  history  with  over  200  new  stores 
opening  this  year  alone?  With  unparalleled  vision  and 
absolute  clarity.  That’s  why  The  Home  Depot®  chooses 
Samsung  —  the  world’s  leadingfnanufacturer  of  TFT-LCD  displays. 
And  now  Samsung’s  commitment  to  the  big  picture  continues 
withShe  innovative  display  technology  found  in  the  new  SyncMaster 
192T,  allowing  your  future  to  appear  just  as  bright. 


Add  vision.  Add  possibility.  Add  Samsung. 


- Visit  www.samsungusa.com 

Samsur  o  Electronics  America,  *nc.  Screen  images  are  simulated. 
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iication  application 


MOM  facilities 

Dnous,  message- based  communication  '*> 
■  Pub  lish/su  bscribe 

Transformation  services 
Content-based  routing  ,»•** 

«*** 

SOAP/HTTP  ^ 


Early  Riders 

In  the  Technology  section:  Enterprise 
service  bus  technology  is  still  in  its  in¬ 
fancy,  but  some  pioneering  companies 
are  using  it  to  solve  integration  prob¬ 
lems  and  save  money.  Page  30 


Developing  IT  Skills  ‘To  Go’ 

In  the  Management  section:  McDonald’s 
Alice  Rowland  is  spearheading  a  national 
IT  apprenticeship  program  that  com¬ 
bines  classroom  learning  with  on-the-job 
training.  Page  44 


NEWS 


SPECIAL  REPORT 


Comdex  organizers,  pinning  the 
show’s  survival  on  its  new  corpo¬ 
rate  IT  focus,  haven’t  managed 
to  get  the  refocused  message 
out  to  IT  professionals. 

Story  begins  on  Page  8. 


9  Longhorn  spurs  developer  in¬ 
terest,  but  Microsoft  isn’t  say¬ 
ing  when  the  next  version  of 
Windows  will  be  ready. 

10  Hewlett-Packard  tools  enable 
Con  Edison  Communications 
to  unify  management  of  its 
metropolitan-area  network. 

12  Offshore  outsourcing  raises 
numerous  risks,  so  IT  man¬ 
agers  need  to  protect  their 
companies  through  due  dili¬ 
gence,  say  contract  experts. 

12  California’s  wildfires  test  the 
disaster  readiness  of  compa¬ 
nies  threatened  by  the  flames 
and  power  outages. 

13  MCI  contracts  are  being  ex¬ 
tended  by  some  federal  agen¬ 
cies,  despite  the  carrier’s 
GSA-mandated  suspension. 

13  Goodyear  hits  $100  million 
bump  due  to  a  faulty  account¬ 
ing  implementation  system. 

14  Sarbanes-Oxley  documenta¬ 
tion  requirements  are  leading 
corporate  execs  to  push  for  IT 
certification  audits. 

57  Bank  of  America  eyes  IT 
cost  reductions  as  part  of  its 
planned  acquisition  of  Fleet¬ 
Boston  Financial. 


TECHNOLOGY 

25  Keeping  Secrets.  As  privacy 
regulations  proliferate,  ven¬ 
dors  have  responded  with  a 
broad  range  of  compliance 
monitoring  and  enforcement 
tools. 

34  QuickStudy:  WebDAV.  Web- 
based  Distributed  Authoring 
and  Versioning  allows  users 
to  collaborate  over  the  Inter¬ 
net  by  editing  and  managing 
files  remotely. 

36  Security  Manager’s  Journal: 
Rogue  Access  Point  Leads  to 
Embarrassment.  Mathias 
Thurman  must  identify  the  lo¬ 
cation  of  an  unauthorized  ac¬ 
cess  point  after  an  outside 
vendor  discovers  its  presence 
and  uses  it  to  get  into  the  cor¬ 
porate  network. 

MANAGEMENT 

41  Serving 
Many  Masters. 

CIO  Joel 
Gruber  of 
RouteOne,  an 
automotive 
joint  venture, 
has  to  balance 
the  IT  needs 
of  the  competitive  partners 
with  the  needs  of  the  new 
company  —  with  four  CIOs 
looking  over  his  shoulder. 

46  Book  Excerpt:  Get  Sales 
Chiefs  on  Your  Side.  Sales 
managers  can  make  or  break  a 
CRM  or  sales  force  automa¬ 
tion  project,  so  it’s  important 
to  make  sure  they’re  enthusi¬ 
astic  supporters,  writes 
Michael  Gentle. 


OPINIONS 

10  On  the  Mark:  Mark  Hall  finds 
a  vendor  whose  software  can 
reportedly  measure  whether 
outsourcing  makes  sense. 

20  Maryfran  Johnson  warns  that  a 
surge  in  the  enforcement  of  pri¬ 
vacy  laws  means  IT  managers 
had  better  get  serious  about 
leading  compliance  work. 

20  Pimm  Fox  usually  dismisses 
screen-scraping  technology, 
but  he  has  found  a  user  and  an 
application  where  it  fits. 

21  Thornton  A.  May  reports  on 
what  some  of  the  nation’s  top 
CIOs  believe  are  the  best  rea¬ 
sons  for  reorganizing  your  IT 
department. 

38  Paul  A.  Strassmann  says  it’s 
tempting  to  point  a  finger  at 
Microsoft  for  desktop  securi¬ 
ty  woes,  but  CIOs  should  take 
some  of  the  blame. 

48  Paul  Glen  thinks  the  clients  of 
IT  departments  are  seeking 
expert  counsel  and  a  good  ex¬ 
perience,  not  a  fast  transac¬ 
tion  or  beautiful  code. 

58  Frankly  Speaking:  Frank 

Hayes  recognizes  that  pure- 
technology  jobs  are  leaving 
U.S.  IT  shops.  But  he  says 
there’s  still  plenty  of  IT  work 
to  be  done  for  the  business. 
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For  the  work  I’m  currently  doing, 
my  compensation  is: 


©  Take  this  week's  QuickPoll  at  www.computerworId.com. 
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Four  Ways  to  Secure  Your 
Company  on  a  Shoestring  Budget 

SECURITY:  Even  without  a  lot  of  funds  for  se¬ 
curity,  there  are  low-cost  steps  you  can  take 
to  reduce  risk.  ©QuickLink  42442 


Enhance  WLAN  Security 

MOBILE/WIRELESS:  Two  consultants  and  a 
UCLA  professor  offer  advice  on  fending  off 
intruders  with  a  smart  antenna  system  and  a 
layered  architecture.  ©  QuickLink  42456 

How  to  Build  an  RSS  Feed 

DEVELOPMENT:  In  this  book  excerpt  from 
Apache,  MySQL,  and  PHP  Weekend  Crash 
Course,  the  author  shows  how  to  use  PHP  for 
Web  content  syndication.  ©  QuickLink  42396 


What’s  a  QuickLink? 


©Throughout  each  issue  of 
Computemorld,  you’ll 
see  five-digit  QuickLink  codes 
pointing  to  related  content  on 
our  Web  site.  Also,  at  the  end  of 
each  story,  a  QuickLink  to  that 
story  online  facilitates  sharing  it 
with  colleagues.  Just  enter  any 
of  those  codes  into  the  Quick¬ 
Link  box,  which  is  at  the  top  of 
every  page  on  our  site. 
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NEWS 


omdex’s  Past  May  Be  Its 

Obstacle  to  Survival 


Organizers  fail  to  get  message  across 
that  show  has  been  refocused  for  IT 


BY  TODD  R.  WEISS 

HE  CORPORATE  IT 
community  appears 
not  to  have  gotten 
the  message  that 
Comdex/Fall  is  being  recast  as 
a  scaled-down  event  focusing 
exclusively  on  IT  profession¬ 
als.  And  that’s  bad 
news  for  show  orga¬ 
nizers  who  are  pinning 
the  event’s  survival  on 
the  new  direction. 

A  Computerworld  poll  of 
several  dozen  IT  professionals 
last  week  indicated  that  re¬ 
spondents  still  perceive 
Comdex  as  being  too  big,  too 
glitzy  and  too  out  of  touch 
with  the  needs  of  corporate  IT 
to  warrant  their  attendance. 
Many  were  not  aware  of  the 
following  developments: 

■  MediaLive  International 
Inc.,  which  was  known  as 
Key3Media  Group  Inc.  until 
emerging  from  Chapter  11 
bankruptcy  earlier  this  year, 
unveiled  plans  to  completely 
refocus  the  event  in  July 
[QuickLink  40163], 
m  Instead  of  the  approxi¬ 
mately  200,000  attendees  and 


2,000  exhibitors  hawking  any¬ 
thing  with  a  battery  that 
thronged  to  Comdex  in  its 
mid-’90s  heyday,  about  50,000 
qualified  or  paid  attendees 
and  some  500  corporate-IT- 
focused  exhibitors  are  expect¬ 
ed  this  year. 

Eric  Faurot,  who  be¬ 
came  general  manager 
of  Comdex  in  April,  said 
he  expects  that  it  will 
take  time  for  the  small¬ 
er,  more  tightly  focused  event 
to  reconnect  with  some  past 
exhibitors  and  attendees. 

“I  can’t  build  a  Comdex  that 
has  every  company  involved 
and  has  everything  I  want  in  it 
all  in  the  first  year,”  Faurot 
said.  “We  know  it’s  Step  1.” 

Comments  from  IT  profes¬ 
sionals  polled  last  week 
demonstrated  how  far  Faurot 
has  to  go  lure  them  back. 

“The  value  of  Comdex  in 
the  data  management  world  is 
very  limited.  It’s  hard  to  get 
things  done  at  a  show  that 
big,”  said  Bob  Leo,  director  of 
data  management  and  admin¬ 
istration  at  transportation  ser¬ 
vices  company  Landstar  Sys- 


WHO’S  GOING? 

Exhibitor  Angst 

Many  top  vendors,  like  users,  are 
waiting  to  see  if  Comdex  organiz¬ 
ers  deliver  on  their  promise  to 
strictly  target  IT  professionals. 

The  few  key  players  exhibiting 
include  the  following: 

■  Microsoft  ■  Dell 
*  AT&T  Wireless 

Despite  the  fact  that  Linux  will  be 
a  core  theme  of  the  event, 
NO-SHOWS  include: 

»Red  Hat  ■  SUSE  Linux 


tern  Inc.  in  Jacksonville,  Fla. 

Michael  McClaskey,  CIO  at 
IT  consulting  vendor  Perot 
Systems  Corp.  in  Plano,  Texas, 
echoed  that  assessment. 
“Comdex  has  become  an  ex¬ 
tremely  large  and  unfocused 
event,  and  it  seems  that  in¬ 
creasingly  little  of  significance 
for  the  enterprise  really  gets 
announced  there,”  McClaskey 
said.  “Our  finite  conference 
dollars  are  better  spent  in 
much  more  focused  forums.” 

Carlos  Recalde,  executive 
director  of  technology  at  fi¬ 
nancial  services  company 
KPMG  LLP  in  Montvale,  N.J., 
said  he  hasn’t  attended 


Comdex  for  at  least  five  years. 
“I  think  the  value  of  this  show 
was  gone  a  while  ago,”  he  said. 

Faurot  acknowledged  that 
the  marketing  challenge  is  a 
formidable  one,  and  that  the 
effort  so  far  has  yielded  little 
to  brag  about. 

No  More ‘Fluff’ 

“It’s  like  anything  that  has  a 
tremendously  powerful  brand 
—  what’s  associated  with  that 
brand  can  be  difficult  to 
change  in  the  minds  of  some,” 
Faurot  said.  “It’s  . . .  been 
around  for  23  years”  and  be¬ 
come  saturated  with  consumer 
electronics  and  peripheral 
products.  “There  wasn’t  any 
real,  central  focus,”  Faurot  said. 
“So  what  ended  up  surfacing 
to  the  top  was  the  gadgets.” 

But  no  more. 

“Obviously,  that  stuff  is  not 
driving  the  IT  industry  right 
now,”  and  it  won’t  be  at  this 
year’s  show,  Faurot  said. 
“We’ve  stripped  out ...  all  the 
stuff  that  was  fluff.” 

Among  the  new  features  of 
this  year’s  show,  which  is  be¬ 
ing  held  again  at  the  Las  Vegas 
Convention  Center  Nov.  16-20, 
are  seven  IT  tracks  being  or¬ 
ganized  to  help  attendees 
learn  more  about  specific 
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Past  Attendees  Might  Return  if  Comdex  Gets  Serious 


If  the  Comdex  Fall  2003  show 
lives  up  to  its  billing  as  a  smaller, 
IT-focused  show  without  all  the 
hoopla  and  gadgetry  of  the  past, 
it  just  might  accomplish  its  goal 
of  luring  back  former  attendees 
who  gave  up  on  it. 

“if  they  truly  do  that,  then  I 
think  I  would  be  interested  and 
would  consider  attending,”  said 
Dan  Agronow,  vice  president  of 
technology  at  Atlanta-based 
VVeather.com.  “It  became  a 
showcase  for  glitz.  It  was,  how 
many  trinkets  can  you  collect?  It 
lost  some  of  the  value  it  had  be¬ 


cause  of  focusing  so  much  on 
the  showmanship  of  the  prod¬ 
ucts.” 

Also,  he  said,  the 
crowds  had  become 
so  large  that  “it  was 
very  hard  to  try  to  pin 
the  vendors  down  to 
get  specific  informa¬ 
tion." 

Other  former 
Comdex  attendees 
agreed,  saying  they 
would  be  willing  to  i? 
give  the  show  another  s 
chance  if  it  makes 


good  on  its  new  promises. 

“We  may  take  a  look  at  them 
next  year  to  see  if  they’re  more 
IT-oriented,”  said 
Chris  Collins,  manag¬ 
er  of  enterprise  archi¬ 
tecture  at  grocery 
store  chain  Ahold 
USA,  a  division  of 
Netherlands-based 
Royal  Ahold  Group. 
“Initially,  when 
Comdex  first  started 
up . . .  they  were 
more  consumer- 
driven  than  IT-driven. 


I  didn’t  realize  they  were  chang¬ 
ing  the  thrust  of  the  show.” 

Joe  Poole,  technical  support 
manager  at  Reading,  Pa.-based 
Boscov’s  Department  Stores, 
said  his  company  stopped  send¬ 
ing  employees  to  shows  like 
Comdex  stopped  several  years 
ago  when  IT  budgets  were  tight¬ 
ened  amid  a  flagging  economy. 
But  if  the  show  becomes  more 
compelling  and  useful  for  IT  - 
and  if  his  budget  opens  up  -  it 
could  again  be  a  possible  desti¬ 
nation,  Poole  said.  “It’s  just  a 
matter  of  how  the  whole  econo¬ 
my  turns  up  next  year.” 

-  Todd  R.  Weiss 


www.computerworld.com 
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technologies,  including  open- 
source  and  Linux,  on-demand 
computing  and  security. 

But  changing  the  percep¬ 
tions  of  IT  professionals  isn’t 
the  only  challenge  faced  by 
show  organizers. 

The  list  of  exhibitors  so  far 
has  a  few  big  names,  including 
Microsoft  Corp.,  AT&T  Wire¬ 
less  Services  Inc.,  and  Dell 
Inc.  But  most  are  smaller  com¬ 
panies.  The  vendor  vacuum  is 
highlighted  by  the  fact  that, 
although  Linux  will  be  a  key 
theme,  none  of  the  major  Lin¬ 
ux  vendors,  including  Red  Hat 
Inc.  and  SUSE  Linux  AG,  will 
have  booths  at  the  show. 

Faurot  acknowledged  the 
missing  pieces  but  said  many 
companies,  including  Linux 
vendors,  never  saw  them¬ 
selves  fitting  into  the  Comdex 
of  old  and  still  haven’t  recog¬ 
nized  the  new  focus.  More¬ 
over,  he  said,  many  companies 
that  didn’t  sign  up  for  booths 
are  nonetheless  participating 
in  forums  and  meeting  with 
customers  off  the  show  floor. 

The  hope  is  that  such  non¬ 
exhibiting  participants  as  chip 
maker  Advanced  Micro  De¬ 
vices  Inc.,  IBM,  Sun  Microsys¬ 
tems  Inc.,  Cisco  Systems  Inc. 
and  Oracle  Corp.  will  find  this 
year’s  show  to  be  useful  and 
sign  up  to  exhibit  next  year, 

Faurot  said.  “There’s  a  lot  of 
stuff  going  on  behind  the 
scenes,  but  we  still  need  to  get 
them  on  the  [exhibit]  floor, 
and  that’s  our  goal  moving  for¬ 
ward,”  he  said.  “We  have  to 
prove  ourselves. 

Comdex  is  striving  to 
change  just  as  a  competitor 
tries  to  unseat  it  as  the  pre¬ 
mier  IT  show.  Across  town, 
Jupitermedia  Corp.  will  hold 
its  first  Computer  Digital 
Expo/Enterprise  IT  Week 
show  at  the  Mandalay  Bay 
Convention  Center  on  the 
same  days  as  Comdex.  That 
show  has  signed  up  keynote 
speakers  from  IBM  and 
Hewlett-Packard  Co.,  among 
other  companies. 

“That’s  just  fine.  I  think 
competition  is  good,”  Faurot 
said.  “I  think  [Jupitermedia] 
saw  us  as  a  company  in  bank¬ 
ruptcy,  and  maybe  they 
thought  there  was  an  opportu¬ 
nity.”  O  42508 
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Programmers  Welcome  Longhorn  Demos,  but  the  Wait  Continues 


Developers  would 
like  software  to  be 
ready  sooner 

BY  CAROL  SLIWA 

LOS  ANGELES 

Programmers  expressed  keen 
interest  in  many  of  the  code- 
named  technologies  that  Mi¬ 
crosoft  Corp.  demonstrated 
last  week  at  its  Professional 
Developers  Conference  here. 

But  the  enthusi-  ~ 

asm  that  many  THE  WHOLE  STORY 

shared  about  the  Visit  our  Application  Devel- 
Avalon  graphics  opment  Knowledge  Center: 


subsystem,  the  Indi-  ©  QuickLink  kllOO 
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technologies  for  building  ad¬ 
vanced  Web  services,  and  the 
WinFS  storage  model  was  tem¬ 
pered  by  the  realization  that  it 
will  be  some  time  before  they 
see  the  Windows  operating 
system,  code-named  Long¬ 
horn,  that  will  feature  them. 

“It’s  interesting,  but  I  think 
it’s  going  to  be  a  long  way 
out,”  said  Christopher  Mc¬ 
Carthy,  a  Chicago-based  se¬ 
nior  systems  engineer  at  Bank 
of  America  Corp.  “This  is  too 
far  out  for  us  to  evaluate.” 

Microsoft  handed  out  a  de¬ 
veloper  preview  version  of 
Longhorn  and  pledged  to 


make  a  beta  version  available 
in  the  second  half  of  2004.  But 
company  executives  declined 
to  provide  details  about  when 
they  expect  Longhorn  to  be 
completed,  even  though  at 
past  events  they  had  shown 
slides  projecting  that  Long¬ 
horn  technologies  could  start 
to  ship  in  2005. 

Jim  Mangione,  a  West  Point, 
Pa.-based  technical  specialist 
at  Merck  &  Co.,  said  he  antici¬ 
pates  that  Indigo 
will  help  with  inte¬ 
gration  in  the  com¬ 
pany’s  heteroge¬ 
neous  environment, 
which  includes 


Windows  and  .Net  as  well  as 
Linux  and  Java.  “I’m  just  hop¬ 
ing  it’s  in  a  production-ready 
state  soon,”  he  said. 

Jeremy  Lehman,  senior  vice 
president  and  head  of  technol¬ 
ogy  at  Thomson  Financial  in 
New  York,  said  his  company 
foresees  a  major  commercial 
opportunity  with  Indigo,  even 
though  it’s  currently  just 
“slideware.”  He  said  his  com¬ 
pany  partners  with  Microsoft 
and  other  vendors  to  provide 
information  and  technology  to 
financial  services  customers, 
and  he  hopes  next  year  to  be 
able  to  demonstrate  products 


m 
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Cracking  the  Code  Names 


LONGHORN:  Next  major  release 
of  Windows  operating  system. 

Due:  Undetermined,  but  not  before 
2005.  Beta  expected  in  the  second 
half  of  2004. 


AVALON:  New  presentation  system 
for  Windows  featuring  hardware- 
accelerated,  unified  graphics  pro¬ 
gramming  model  for  2D,  3D,  video 
and  animation  and  common  pro¬ 
gramming  model  for  building  user 
interfaces,  documents,  graphics 
and  media.  Due:  With  Longhorn. 

INDIGO:  Communications  infra¬ 
structure  and  programming  model 
for  building  advanced  service-ori¬ 
ented  applications;  provides 
plumbing  code  for  secure,  reliable, 
transacted  messaging. 

Due:  With  Longhorn. 

XAML-  Microsoft-created 
markup  language  for  building 


Windows  applications;  separates 
code  from  content,  enabling 
designers  and  developers  to  collab¬ 
orate.  Due:  With  Longhorn. 

WHIDBEY:  Next  release  of  Visual 
Studio  .Net  development  tools. 
Due:  2004. 


WHITEHORSE:  Set  of  tools 
for  designing  service-oriented 
applications  and  operations  infra¬ 
structure  simultaneously;  uses 
drag-and-drop  design  surface  to 
connect  XML  Web  services. 

Due:  With  Whidbey. 

WinFS:  Storage  subsystem  in 
Longhorn;  combines  file  data,  rela¬ 
tional  data  and  XML  data. 

Due:  With  Longhorn. 

WinFX:  New  Windows  program¬ 
ming  model,  next  step  beyond 
Win  32.  Due:  With  Longhorn. 


that  use  Indigo  for  exchanging 
data  via  Web  services. 

Lehman  said  proprietary 
middleware  systems  tend  to 
work  only  with  companies’  in¬ 
ternal  systems,  whereas  Web 
services  can  be  used  on  an  in¬ 
ternal  and  external  basis.  He 
said  he  expects  Indigo  to  help 
to  ease  integration,  lower 
costs  and  reduce  complexity. 
But  Lehman  is  also  cognizant 
of  Indigo’s  immaturity,  and  he 
said  he  expects  to  have  to  wait 
for  its  successor  to  get  rich 
functionality  for  transactions. 

Roy  Schulte,  an  analyst  at 
Gartner  Inc.,  explained  that 
Indigo  is  a  superset  of  Micro¬ 
soft’s  Messaging  Queuing  (MS 
MQ)  technology  and  its  Com¬ 
ponent  Object  Model  (COM), 
COM+,  .Net  remoting  and 
Web  services  support.  “Think 
of  this  as  a  simplification,  a 
unification  of  communication 
middleware  on  behalf  of  Mi¬ 
crosoft’s  plan,”  Schulte  said. 

Indigo  will  enable  develop¬ 
ers  to  more  easily  deliver  se¬ 
cure,  reliable  and  transacted 
messages  by  including  the 
“tricky”  security  code  and  oth¬ 
er  plumbing  code  that  nobody 
“would  voluntarily  likely  want 
to  do,”  said  John  Shewchuk,  an 
architect  on  the  Indigo  team. 

Microsoft  currently  delivers 
some  of  those  capabilities 
through  its  Web  Services  En¬ 
hancement  (WSE)  tool  kit, 
and  about  half  of  Indigo  is 
WSE,  according  to  Eric  Rud¬ 
der,  Microsoft’s  senior  vice 
president  of  servers  and  tools. 
But  the  Web  services  specifi¬ 
cations  on  which  WSE  is 
based  are  still  being  finalized. 

New  graphics  capabilities  in 
Avalon  appeal  to  John  Rob¬ 
bins,  a  Bloomfield,  Conn.- 
based  systems  architect  at 
Cigna  Corp.  He  said  the  new 
Extensible  Application  Mark¬ 
up  Language’s  (XAML)  ability 
to  separate  code  from  content 
will  be  helpful,  because  it  will 
allow  a  graphics  person  to  de¬ 
sign  the  interface  and  then 
hand  off  the  XAML  file  to  a 
developer  to  create  the  code 
behind  it.  He  also  said  XAML 
could  be  useful  for  working 
with  third-party  design  tools. 


Microsoft  Exec  Shares  Details 
About  Longhorn  and  Indigo 


LOS  ANGELES 

Eric  Rudder,  senior  vice  presi¬ 
dent  of  servers  and  tools  at  Mi¬ 
crosoft,  spoke  with  Computer- 
world's  Carol  Sliwa  last  week 
about  new  technologies  that  the 
company  detailed  at  its  Profes¬ 
sional  Developers  Conference 
here.  Excerpts  from  the  inter¬ 
view  follow: 

When  will  we  see  the 
new  technologies  that 
Microsoft  demonstrat¬ 
ed  here?  I  think  more 
important  than  exactly 
when  is  that  we’ve  gone 
out  of  our  way  to  share 
our  thinking  with  the 
community  and  get 
feedback  early.  We  take  a  bit  of 
a  risk. ...  But  I  think  I've  been 
clear  with  my  team  certainly 
[that]  I'd  absolutely  run  the  risk 
of  disclosing  too  much  rather 
than  disclosing  too  little. 

We  absolutely  will  deliver 
Yukon,  the  next  version  of  SQL 
Server,  and  Whidbey,  the  next 
version  of  Visual  Studio,  shortly 
...  in  the  second  half  of  2004. 
We  think  of  that  as  together  in 
the  same  wave,  and  Longhorn 
sometime  after  that. 

Microsoft  recently  listed 
Longhorn,  the  next  major 
Windows  release,  for  2005 
and  beyond.  Is  2005  still  a 
possibility?  We’re  more  fo¬ 
cused  on  building  the  right 
product  with  the  right  quality, 
and  those  things  will  determine 
our  schedule. 

A  Gartner  analyst  character¬ 


ized  Indigo,  the  code  name 
for  communications  technol¬ 
ogy  for  building  advanced 
Web  services,  as  an  enter¬ 
prise  service  bus  (ESB).  Do 
you  agree?  We’ve  showed 
[off]  Indigo  as  the  technology 
for  our  Web  services  runtime.  I 
think  people  will  build  enterprise 
service  bus  strategies  that  en¬ 
compass  a  variety  of 
technologies,  and  hope¬ 
fully  it’s  Web-service- 
based.  We  can  actually 
run  over  multiple  trans¬ 
ports.  So  you  might 
choose  to  run  it  over  TCP 
or  HTTP  or  your  other 
messaging  strategies  like 
MS  MQ  or  Tibco.  I  think 
you'll  see  a  combination. 

Does  Indigo  include  message- 
oriented  middleware?  Indigo  is 
middleware  in  some  sense. 

Will  Indigo  be  competitive 
with  message-oriented  mid¬ 
dleware  products?  It  can  be 

complementary. 

Indigo  is  targeted  for  Long¬ 
horn.  Will  Microsoft  make  Indi¬ 
go  available  for  Windows 
Server  2003?  If  the  reaction 
from  customers  is  great  and  they 
want  Web  services  technology 
on  2003,  it’s  definitely  something 
well  consider. 

MORE  COVERAGE 

To  read  more  about  ESB 
technology,  turn  to  page  30. 

To  read  the  complete  interview 
with  Rudder,  go  online  to 

0  QuickLink  42531 
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The  new  WinFS  storage  sys¬ 
tem  was  most  interesting  to 
Luke  Voss,  a  software  engi¬ 
neer  at  the  Jet  Propulsion  Lab¬ 
oratory  in  Pasadena,  Calif.  He 
said  the  lab  currently  uses  a 
relational  database  to  capture 
relationships  between  sets  of 
data,  but  it  makes  more  sense 
to  unify  the  framework  with 


the  file  system.  The  benefit 
will  be  universal  data  access 
and  better  searching  capabili¬ 
ties,  he  said.  “I  don’t  think 
WinFS  will  be  something  that 
solves  specific  problems,  but 
it  will  change  the  way  we  look 
at  the  problem,”  he  said.  “Data 
will  be  more  important  than 
files.”  O  42511 
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CA  Readies  Suite 
Of  Identity  Tools 

Computer  Associates  Interna¬ 
tional  Inc.  said  it’s  combining  six 
products  from  its  eTrust  security 
software  line  into  a  unified  set  of 
identity  and  access  management 
tools.  The  plan,  which  follows 
similar  moves  by  IBM  and  other 
rivals,  will  be  detailed  this  week 
along  with  an  upgrade  of  CA’s 
eTrust  Admin  software.  New  re¬ 
leases  of  the  other  tools  are  due 
to  be  announced  in  May. 


HP  Stops  Selling 
Its  e3000  Systems 

Hewlett-Packard  Co.  ended  sales 
of  its  HP  e3000  midrange  sys¬ 
tems  on  Oct.  31,  completing  a 
phaseout  process  that  started 
two  years  ago.  Some  e3000 
users  marked  the  occasion  by 
holding  informal  “wakes”  at  bars 
and  backyard  barbecues.  HP  will 
continue  to  offer  CPU  upgrades 
and  e3000  peripherals  for  the 
next  12  months  and  will  support 
the  system  until  the  end  of  2006. 


Problem  Affects 
Antipiracy  Tool 

Symantec  Corp.  said  it’s  investi¬ 
gating  a  problem  that’s  affecting 
an  antipiracy  tool  built  into  its 
Norton  AntiVirus  2004  desktop 
software.  The  tool  is  repeatedly 
prompting  some  users  to  re¬ 
enter  product  activation  codes 
when  they  reboot  their  PCs, 
Symantec  said.  The  Cupertino, 
Calif.-based  company  also  an¬ 
nounced  that  it’s  buying  ON 
Technology  Corp.  in  Waltham, 
Mass.,  for  S100  million  in  cash. 


Palm  Completes 
Purchase,  Spin-off 

Palm  Inc.  completed  its  acquisi¬ 
tion  of  Handspring  Inc.  and  spun 
off  its  PalmSource  Inc.  operating 
system  unit  into  a  separate  com¬ 
pany.  Milpitas,  Calif.-based  Palm 
also  renamed  itself  palmOne  Inc. 
as  part  of  its  deal  with  Mountain 
View,  Calif.-based  Handspring. 
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MARK  HALL  ■  ON  THE  MARK 

Outsourcing  Deals  Fail 
Half  the  Time .. . 

. . .  because  most  companies  lack  data  on  how  well  internal  operations 
stack  up  against  so-called  cheap,  external  competitors.  Pointing  to  market 
research  by  Giga  Information  Group  Inc.  and  others,  Jason  Schroedl, 
director  of  corporate  marketing  at  newScale  Inc.,  claims  that  more 
than  50%  of  IT  outsourcing  agreements  fail  for  lack  of  comparative 
information.  “You  need  to  know  how  well  your  outsourcer  stacks  up 


against  your  internal  offerings,”  he  says, 
or  you  increase  the  risk  of  having  an  out¬ 
sourcing  deal  collapse.  For  example, 
companies  often  discover  that  much  of 
the  money  saved  by  sending  work  out¬ 
side  is  eaten  up  by  the  costs  of  managing 
the  outsourcer  relationship.  Also  com¬ 
mon  is  for  the  outsider  to  bungle  the  service 
quality.  Arming  yourself  with  apple-to-ap- 
ple  cost  comparisons  and  measurable 
service-level  agreements 
can  boost  outsourcing  suc¬ 
cess  rates  to  higher  than 
75%,  Schroedl  says.  That’s 
because  you  might  discover 
that  the  best  and  most  cost-ef¬ 
fective  work  can  be  done  inside 
the  organization,  so  you  out¬ 
source  fewer  tasks.  Those 
metrics  will  be  among  the 
improvements  in  Foster  City, 

Calif.-based  newScale’s  re¬ 
lease  of  RequestCenter  2004 
late  this  quarter.  The  up¬ 
grade,  which  comes  packed 
with  more  than  500  built-in 
best  practices  for  establish¬ 
ing  and  measuring  a  service 
offering,  starts  at  $400  per 
user.  ■  Developers  generally  get 


the  short  end  of  the  services  stick.  Few  ven¬ 
dors  think  about  their  needs.  Oh,  sure, 
there  are  tools,  utilities  and  much  more, 
but  there’s  little  comparative  infor¬ 
mation.  Charles  Stack,  CEO  of  Flashline 
Inc.  in  Cleveland,  thinks  the  lack  is  par¬ 
ticularly  striking  when  it  comes  to  open- 
source  technology.  “Developers  need  com¬ 
parative  data  between  open-source  and 
commercial  products,”  he  says.  So,  with 
the  release  today  of  Flash- 
Pack  for  Open  Source,  Stack 
contends,  you’ll  be  able  to 
see  how  much  you  can  save 
by  using,  say,  JBOD  instead 
of  WebSphere,  or  Linux  in 
place  of  Windows  or  So¬ 
laris.  You  can  also  set  up 
the  software  to  track  assets 
and  publicize  product  sup¬ 
port  processes.  FlashPack 
requires  the  Flashline  Reg¬ 
istry,  which  has  broader 
functions  for  developers 
and  managers  and  starts  at 
$70,000.  ■  Crashing  Win¬ 
dows  systems  may  be  less 
of  a  problem  with  Mi¬ 
crosoft’s  recent  operating 
system  releases,  but  they’re 


by  no  means  a  thing  of  the  past.  And  Bob 
Nolan,  CEO  of  Raxco  Software  Inc.  in 
Gaithersburg,  Md.,  claims  that  Micro¬ 
soft’s  System  Restore  feature  “doesn’t  re¬ 
store  all  your  apps  or  data.”  And  in  his 
opinion,  using  backup  products  is  a  time- 
consuming  pain  in  the  butt.  Assuming  you 
haven’t  suffered  a  hard  drive  meltdown,  Rax- 
co’s  new  FirstDefense  ISR  can  restore  the 
drive  to  a  preproblem  state  from  one  of  10 
prior  user-selected  snapshots  the  soft¬ 
ware  has  taken  and  stored  on  the  drive. 
Furthermore,  FirstDefense  lets  you  “an¬ 
chor”  files  or  folders  to  it,  so  that  their 
data  is  always  kept  current,  even  if  the 
data  has  been  updated  after  a  snapshot. 
The  software  runs  as  a  preboot  operation, 
so  a  user  can  tell  the  utility  to  reboot  to  a 
state  prior  to  the  crash.  The  server  version 
ships  next  week  for  $395,  and  a  worksta¬ 
tion  release  can  be  expected  later  this 
quarter  for  $49.95.  ■  Chat  with  Caroline 
Smith  at  Travelocity.com  LP,  a  Fort  Worth, 
Texas-based  subsidiary  of  Sabre  Inc.,  and 
you’ll  get  a  lesson  or  two  in  how  to  spend 
IT’s  budget.  The  director  of  database  mar¬ 
keting  and  CRM  for  the  online  travel  ser¬ 
vice  recounts  how  she  shifted  the  compa¬ 
ny’s  data  warehouse  work  from  Oracle  to 
technology  from  Teradata  Corp.  in  San 
Diego.  “We  were  going  to  have  to  shell  out 
more  money  with  Teradata,  and  it  would  have 
cost  us  nothing  to  stay  with  Oracle,”  she  re¬ 
calls.  Plus,  she  says,  they  had  trained  Ora¬ 
cle  database  administrators  and  had  a  suc¬ 
cessful  implementation  of  Oracle  for  on¬ 
line  transactions.  Why  shift  these  pricey 
gears?  Simple.  End-user  business  analysts 
would  be  able  to  develop  profitable  pro¬ 
grams  gleaned  from  warehouse  intelli¬ 
gence  without  needing  constant  adminis¬ 
trator  help,  she  says.  And  they’d  be  able  to 
construct  queries  of  the  warehouse  not 
possible  in  Oracle.  Smith’s  conclusion: 
“The  cost  of  things  you  can’t  do  is  often 
the  most  expensive.”  Amen.  ©  42491 


DantzWithMe 


If  your  smaller  remote 
sites  have  data  worth 
backing  up  but  the  folks 
out  there  can’t  quite  fig¬ 
ure  out  tape  systems, 
consider  the  new  Retro¬ 
spect  Disk-to-Disk  edi¬ 
tion,  which  is  available 
today  for  $299  from 
Dantz  Development 
Corp.  in  Walnut  Creek, 
Calif.  The  software  regu¬ 
larly  backs  up  as  much  as 
300GB  of  data  to  a  pair  of 
low-cost  hard  drives.  No 
tape  fiddling  necessary. 


Con  Edison  Unifies  Network  Management 


BY  MATT  HAMBLEN 

Con  Edison  Communications 
LLC  last  week  began  testing 
new  management  software 
from  Hewlett-Packard  Co.  on 
the  fiber-optic  network  it  op¬ 
erates  in  the  New  York  metro¬ 
politan  area,  with  the  goal  of 
unifying  management  of  all 
devices  on  the  network. 

Orlando  Hernandez,  direc¬ 
tor  of  IT  at  the  subsidiary  of 
Consolidated  Edison  Inc.  in 
New  York,  said  he  hopes  to 
put  the  HP  OpenView  Net¬ 
work  Node  Manager  software 


into  production  this  month. 

He  added  that  officials  at  Con 
Edison  Communications  want 
network  administrators  to  be 
able  to  monitor  all  250  Ether¬ 
net  elements  on  its  metropoli¬ 
tan-area  network  from  a  single 
management  console. 

Hernandez  said  the  unified 
view  should  enable  the  admin¬ 
istrators  to  react  more  quickly 
when  problems  occur  on  the 
3-year-old  commercial  net¬ 
work,  which  has  about  200 
business  customers. 

By  year’s  end,  Con  Edison 


also  plans  to  install  a  second 
HP  product  called  OpenView 
Operations.  It  will  be  used  to 
automate  management  of  the 
company’s  back-office  sys¬ 
tems,  including  LAN  and 
WAN  applications  such  as  an 
Oracle  database  and  Windows 
Active  Directory  services. 

Hernandez  said  the  two  HP 
applications  are  expected  to 
cost  about  $100,000,  including 
installation.  Con  Edison  has 
already  spent  more  than  $1 
million  to  roll  out  HP’s  Open- 
View  TeMIP  Operations  Sup¬ 


port  system,  which  offers  a 
set  of  telecommunications 
infrastructure  management 
capabilities,  including  fault 
management  and  service  acti¬ 
vation  tools. 

Network  Node  Manager 
will  feed  network  alarms  and 
fault  information  into  the 
TeMIP  software,  according  to 
Hernandez.  It  should  also 
lessen  the  need  for  Con  Edi¬ 
son’s  IT  staffers  to  write  cus¬ 
tom  software  modules  to  con¬ 
figure  new  network  devices. 
“Developer  time  is  money, 
and  it  makes  no  sense  to  re¬ 
create  the  wheel,”  he  said. 

©  42515 
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Offshore  Risks  Are  Numerous, 
Say  Those  Who  Craft  Contracts 


Due-diligence  process  needed  to  ensure 
security  measures,  backup  plan  in  place 


BY  PATRICK  THIBODEAU 

NEW  YORK 

T  managers  who  cut  cor¬ 
ners  in  their  offshore  out¬ 
sourcing  contracts  may 
jeopardize  their  compa¬ 
nies’  security  and  intellectual 
property  and  could  well  un¬ 
dermine  expected  cost  sav¬ 
ings,  attorneys  who  negotiate 
these  deals  warned  last  week. 

The  potential  pitfalls  are 
numerous,  and  companies 
can’t  take  anything  for  grant¬ 
ed.  If  an  offshore  provider  says 
it  has  a  backup  plan,  for  in¬ 
stance,  don’t  assume  that  it 
will  work,  said  Marina  Gra¬ 
cias,  deputy  general  counsel  at 
Providian  Bancorp  Services  in 
San  Francisco. 


“If  all  these  backup  plans 
are  there,  that’s  great,”  Gracias 
told  an  American  Conference 
Institute  forum  here  last  week. 
“But  have  somebody  test  it.” 

Carefully  outline  the  proc¬ 
ess  for  ordering  changes  to  the 
work  being  performed,  and 
stick  to  it,  said  Mark  Gross- 
man,  a  Miami-based  attorney 
at  Becker  &  Poliakoff  PA.  It’s 
easy  for  companies  to  lose 
track  of  change  orders  in  mul¬ 
tiple  e-mail  exchanges  with  a 
vendor  and  end  up  with  unex¬ 
pected  bills. 

Find  out  how  stable  an  out¬ 
sourcer’s  workforce  is,  advised 
Dennis  Sholl,  CEO  of  Global 
Vantedge  Inc.,  a  Larkspur, 
Calif.,  provider  of  credit  ser¬ 


vices.  Managers  at  offshore 
service  providers  can  quickly 
find  work  with  another  pro¬ 
vider  if  they  aren’t  happy,  said 
Sholl.  So  make  sure  your  pro¬ 
vider  has  a  career  advance¬ 
ment  path  in  place  for  them,  he 
said.  “Don’t  just  ask  what  their 
attrition  rate  is,”  he  said.  “Find 
out  how  they  measure  it.” 

A  lot  of  the  advice  offered  at 
the  forum  would  apply  to  any 
outsourcing  contract.  But  dif¬ 
fering  legal  standards  and  cul¬ 
tural  norms  can  create  uncer¬ 
tainties  in  offshore  deals.  The 
concept  of  time,  for  instance, 
doesn’t  mean  the  same  thing 
in  all  cultures.  “When  some¬ 
body  says,  ‘It  will  get  done 
shortly,’ ...  it  could  mean  one 
day  or  a  couple  of  years,”  said 
Bijesh  Thakker,  an  attorney  at 
Thakker  &  Thakker  in  Banga¬ 
lore,  India. 


To  protect  themselves,  com¬ 
panies  need  to  go  through  an 
exhaustive  due-diligence  proc¬ 
ess  and  examine  every  possi¬ 
ble  contingency,  outsourcing 
experts  and  users  advised. 

Companies  moving  work  to 
an  offshore  provider  can  sig¬ 
nificantly  increase  costs  if 
transition  details  aren’t  spelled 
out,  said  Cliff  Justice,  manag¬ 
ing  director  at  NeoIT  Inc.,  a 
San  Ramon,  Calif.-based  off¬ 
shore  consulting  firm.  U.S. 
companies  may  run  parallel  IT 
processes  before  they’re  com¬ 
fortable  enough  to  hand  off 
the  work.  Get  that  transition 
wrong  and  “it  will  duplicate 
costs  and  create  a  situation 
where  ROI  is  extended  out 
years,”  Justice  said. 

Security  is  a  major  issue. 
Orrie  Dinstein,  senior  counsel 
at  a  financial  services  firm 


Calif.  Wildfires  Test  Backup 
Readiness  of  IT  Systems 


Many  companies 
fend  off  downtime 


BY  LINDA  ROSENCRANCE 

The  wildfires  that  ravaged 
California  last  week  put  the 
disaster  preparedness  of  many 
companies’  IT  systems  to  the 
test.  Those  able  to  report  a 
passing  grade  were  demon¬ 
strably  relieved. 

For  example, 
although  fires  in 
San  Diego  County 
caused  widespread 
power  outages  and 
threatened  its  head¬ 
quarters,  document  conver¬ 
sion  company  ADCS  Inc.’s  IT 
systems  kept  the  business  up 
and  running. 

Cliff  Rittel,  director  of  IT  at 
Poway,  Calif.-based  ADCS, 
credited  his  infrastructure 
power  and  cooling  system 
from  West  Kingston,  R.I.- 
based  American  Power  Con¬ 


version  Corp.  (APC). 

Rittel  said  that  even  though 
the  area  experienced  numer¬ 
ous  power  spikes  and  outages 
on  Oct.  26,  ADCS  experienced 
no  communications  or  server 
downtime  because  of  its  APC 
InfaStruXure  power  and  cool¬ 
ing  system. 

“Our  Poway  headquarters  is 
our  main  network  operations 
center  for  telecommunica¬ 
tions,  mail  system 
and  VPN  connec¬ 
tions  worldwide,  so 
the  mission-critical 
uptime  was  para¬ 
mount,”  he  said. 

Rittel  also  said  his  compa¬ 
ny’s  telecommunications  sys¬ 
tems  were  unaffected  because 
its  service  provider,  AT&T 
Corp.,  had  laid  its  fiber-optic 
cable  underground. 

Meanwhile,  Navy/Marine 
Corps  Intranet  (N/MCI)  con¬ 
tractor  Electronic  Data  Sys¬ 
tems  Corp.  temporarily  trans- 


FIRE  COVERAGE 

California’s  disaster  response 
system  got  a  workout: 
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ferred  help  desk  services  from 
its  facility  in  San  Diego  to  Nor¬ 
folk,  Va. 

Kevin  Clarke,  a  spokesman 
for  Plano,  Texas-based  EDS, 
said  his  company  took  the  San 
Diego  facility  off-line  for  about 
24  hours  beginning  the  morn¬ 
ing  of  Oct.  27.  “There  was  no 
interruption  of  service,”  Clarke 
said.  “We  built  the  N/MCI  in¬ 
frastructure  to  do  just  this.” 

Atlanta-based  Cingular 
Wireless  said  in  a  statement 
issued  Oct.  29  that  less  than 
1%  of  its  cell  towers  in  the  San 
Diego  and  Los  Angeles  areas 
were  affected  by  the  fires. 

“Service  restoration  efforts 
have  brought  almost  80%  of 


the  sites  back  online,”  the 
company  said.  “Those  sites 
that  have  not  been  restored  are 
in  areas  currently  inaccessible 
due  to  safety  concerns  or  have 
been  destroyed  and  are  being 
rebuilt.” 

Cingular  said  it  deployed  25 
backup  generators  to  augment 
commercial  power  losses  at 
cell  sites  and  deployed  mobile 
wireless  facilities. 

Laura  Oberhelman,  a 
spokeswoman  for  Atlanta- 
based  Cox  Communications 
Inc.,  said  the  company’s  net¬ 
work  had  performed  with  98% 
of  its  customers  in  the  affected 
areas,  encountering  no  loss  of 
service.  ©  42480 


» . 
* 


Offshore 

Checklist 

DETAIL  service-level  agreements 
and  delivery  requirements. 

*  ARRANGE  performance  mea¬ 
surements,  ongoing  monitoring 
and  provisions  for  audits. 

a  ASSESS  the  vendor's  work¬ 
force  stability. 

■  ASCERTAIN  what  customers 
your  vendor  has  lost 

*  DETERMINE  how  your  data 
is  protected  if  your  vendor  is 
working  with  your  competitors. 

a  STIPULATE  security  and 
background-check  policies. 

«  ENSURE  compliance  with 
all  laws. 

*  GET  everything  in  writing. 

that  he  requested  not  be  iden¬ 
tified,  said  users  need  to  con¬ 
sider  how  data  is  classified 
and  what  level  of  security  and 
encryption  is  applied  to  it.  Pe¬ 
riodic  security  checks,  includ¬ 
ing  penetration  testing,  are 
good  practice,  he  said. 

It’s  also  important  that  user 
companies  get  consensus  in¬ 
ternally  and  set  clear  objec¬ 
tives  before  signing  an  out¬ 
sourcing  agreement. 

“You’ve  got  to  be  able  to 
demonstrate  your  savings,  and 
they  have  to  be  unambiguous,” 
said  Akiba  Stern,  an  attorney 
at  Shaw  Pittman  LLP  in  New 
York.  Offshore  agreements  are 
“going  to  be  sold  to  your  man¬ 
agement  on  the  basis  of  costs,” 
Stern  said. 

And  companies  have  to  con¬ 
sider  all  of  the  expenses:  trav¬ 
el,  management  and  telecom¬ 
munications  costs,  as  well  as 
the  risk  of  additional  future 
costs.  “What  happens  if  the 
privacy  laws  change  again?  Is 
that  something  that  is  priced 
into  the  deal?”  asked  Stern. 

Companies  have  to  be  cer¬ 
tain  that  they  have  nailed 
down  all  the  terms  before  an 
outsourcing  contract  is  signed. 

“Your  greatest  leverage  is 
before  you  sign  a  deal,”  said 
Mark  Feingold,  corporate 
counsel  at  Aventis  Pharma¬ 
ceuticals  Inc.  in  Bridgewater, 
N.J.  ©  42504 
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Federal  Agencies  Extend  Deals  With  MCI 
Despite  Its  GSA-Mandated  Suspension 


Some  agencies  say  the  extensions  are 
temporary;  senator  seeks  justifications 


BY  MATT  HAMBLEN  AND 
DAN  VERTON 

Several  federal  agencies  re¬ 
cently  extended  network  ser¬ 
vice  contracts  with  MCI,  and 
one  awarded  it  a  small  new 
deal,  despite  a  July  decision  by 
the  U.S.  General  Services  Ad¬ 
ministration  (GSA)  to  suspend 
the  company  from  competing 
for  contracts. 

For  example,  the  Defense 
Information  Systems  Agency 
(DISA)  last  week  said  it  has 
renewed  four  contracts  with 
MCI  and  added  a  new  pact  for 
an  emergency  telephone  sys¬ 
tem.  According  to  DISA,  the 
total  value  of  the  extensions 
and  the  phone  system  contract 
is  $117.9  million. 

Under  federal  acquisition 
rules,  agencies  can  continue  to 


do  business  with  suspended 
contractors  if  they  determine 
that  there  are  compelling  rea¬ 
sons  to  do  so,  such  as  national 
security.  But  the  moves  by 
DISA,  the  Department  of  Jus¬ 
tice,  the  Social  Security  Ad¬ 
ministration  and  the  Armed 
Forces  Retirement  Home  have 
caught  the  attention  of  Sen. 
Susan  Collins  (R-Maine), 
chairman  of  the  Senate  Gov¬ 
ernmental  Affairs  Committee. 

Collins  has  asked  each 
agency  by  the  end  of  this  week 
to  provide  details  about  all  of 
the  contracts  they  have  initiat¬ 
ed  or  extended  with  MCI 
since  the  company’s  debar¬ 
ment  and  to  spell  out  their 
reasons  for  doing  so. 

DISA  spokeswoman  Betsy 
Flood  said  the  agency’s  recent 


dealings  with  MCI 
were  necessary,  but 
she  declined  to  dis¬ 
close  detailed  rea¬ 
sons.  Flood  said 
DISA  officials  noti¬ 
fied  the  GSA  about 
the  four  extensions 
and  the  new  Gov¬ 
ernment  Emer¬ 
gency  Telephone 
System  (GETS) 
contract,  a  one- 
year  deal  worth 
$1.7  million. 

By  far,  the  largest  extension 
awarded  by  DISA  was  the  re¬ 
newal  of  a  contract  for  digital 
satellite  transmission  services 
in  the  Pacific  Ocean  that’s  pro¬ 
jected  to  be  worth  $80  million 
during  the  next  12  months. 
However,  Flood  said  a  selec¬ 
tion  process  is  under  way  to 
find  an  alternative  source  for 
those  services. 

Fred  Rao,  chief  of  manage¬ 


ment  information 
systems  at  the 
Armed  Forces 
Retirement 
Home,  said  that 
agency  also  is 
looking  for  a  new 
service  provider 
after  giving  MCI 
an  extension  of 
only  90  days  on  a 
4-year-old  con¬ 
tract  for  600 
voice  communi¬ 
cations  lines. 

Rao  added  that  the  exten¬ 
sion,  which  took  effect  Oct.  1, 
was  needed  because  a  con¬ 
tract  with  another  vendor 
couldn’t  be  put  into  place 
quickly  enough  following 
MCI’s  debarment.  “There’s 
no  way  in  the  world  you  can 
change  your  phones  over¬ 
night,”  he  said. 

The  GSA  suspended  MCI, 
which  is  still  officially  known 


There’s 
no  way  in 
the  world  you 
can  change 
your  phones 
overnight. 


FRED  RAO,  CHIEF  OF 
MANAGEMENT  INFORMATION 
SYSTEMS.  ARMED  FORCES 
RETIREMENT  HOME 


as  WorldCom  Inc.,  after  deter¬ 
mining  that  the  company  had 
yet  to  adequately  revamp  its 
internal  accounting  controls 
and  business  ethics  following 
the  accounting  scandal  that 
forced  it  to  seek  bankruptcy 
protection  [QuickLink  40319J. 

MCI  spokeswoman  Natasha 
Haubold  defended  the  recent 
contract  awards.  “These  were 
primarily  extensions  to  exist¬ 
ing  contracts,  and  we  didn’t 
initiate  these  extensions,” 
Haubold  said.  “They  were  put 
in  place  to  avoid  service  dis¬ 
ruptions  that  could  affect  the 
national  security  and  the  citi¬ 
zens  of  the  United  States.” 

Asked  about  the  GETS  con¬ 
tract,  Haubold  said  the  new 
phone  system  was  designed  to 
address  national  security  by 
giving  priority  to  emergency 
calls  during  crises  such  as  the 
Sept.  11  terrorist  attacks. 

She  noted  that  MCI  has  lost 
other  contracts  because  of  the 
GSA’s  suspension.  For  exam¬ 
ple,  the  National  Guard  award¬ 
ed  Sprint  Corp.  a  network  deal 
that  replaced  an  expiring  con¬ 
tract  with  MCI,  according  to 
Haubold.  O  42506 


Goodyear  Hits  $100M 
Bump  With  ERP  System 


Tire  maker  will 
have  to  restate 
financial  results 

BY  MARC  L.  SONGINI 

Goodyear  Tire  &  Rubber 
Co.  last  week  said  it’s  still  in¬ 
vestigating  what  went  wrong 
with  its  financial  systems  and 
caused  a  major  accounting 
blowout  at  the  company. 

The  Akron,  Ohio-based  tire 
maker  added  that  it  hasn’t  set 
a  firm  target  date  for  complet¬ 
ing  a  planned  fix  of  the  balky 
systems,  which  include  a  cor¬ 
porate  accounting  system 
based  on  SAP  AG’s  ERP  soft¬ 
ware  plus  a  set  of  older  appli¬ 
cations  that  are  used  for  inter¬ 
company  billing. 

Goodyear  on  Oct.  22  dis¬ 
closed  that  it  would  have  to 
restate  its  financial  results 
back  to  1998,  partly  because  of 


financial  errors  resulting  from 
a  faulty  implementation  of  the 
accounting  system.  It  also  cit¬ 
ed  processing  malfunctions  on 
the  intercompany  systems. 

One  thing  is  certain:  Good¬ 
year  will  take  a  big  financial 
hit  as  a  result  of  the  system 
snafus.  In  a  statement,  the 
company  said  it  expects  to 
lower  the  net  income  it  re¬ 
ported  during  the  restatement 
period  by  as  much  as  $100  mil¬ 
lion.  In  addition,  the  company 
postponed  the  release  of  its 
results  for  this  year’s  third 
quarter  (see  chart). 

The  SAP-based  ERP  system 
was  installed  in  1999  and  runs 
Goodyear’s  core  accounting 
functions.  Meanwhile,  the 
intercompany  billing  systems 
handle  internal  transactions 
on  purchases  of  raw  materials 
made  centrally  for  use  through¬ 
out  the  company’s  global  oper- 


System  Fallout 


■  Goodyear  will  restate  its  fi¬ 
nancial  results  for  the  years 
1998  through  2002  and  for  the 
first  half  of  this  year. 

■  Up  to  S100  million  in  profits 

will  be  wiped  off  the  company's 
books,  although  it  said  revenue 
won’t  be  affected. 

■  The  scheduled  announce¬ 
ment  of  Goodyear’s  third- 
quarter  results  was  delayed 
from  Oct.  23  to  mid-November. 


ations,  according  to  a  Good¬ 
year  spokesman. 

Goodyear  declined  to  make 
any  of  its  IT  managers  avail¬ 
able  to  comment  about  the 
matter.  The  company  absolved 
SAP’s  software  from  any 
blame,  saying  that  the  prob¬ 
lems  stemmed  from  the  way 
the  applications  were  installed. 

“It’s  important  to  note  that 
we  said  the  situation  involved 
the  implementation  of  the 
ERP  [software]  and  did  not  say 


we  had  a  problem  with  the 
software  itself,”  the  Goodyear 
spokesman  said. 

He  added  that  company  of¬ 
ficials  currently  are  “identify¬ 
ing  where  the  errors  were”  in 
the  ERP  rollout  and  the  inter¬ 
nal  billing  systems  so  that  fix¬ 
es  can  be  made  and  account¬ 
ing  procedures  improved. 

Goodyear  got  consulting 
help  on  the  SAP  project  from 
PricewaterhouseCoopers  and 
J.D.  Power  and  Associates,  ac¬ 
cording  to  the  tire  maker’s 
spokesman.  He  said  Goodyear 
isn’t  contemplating  any  legal 
actions  against  the  consulting 
firms  at  this  point. 

Nor  does  Goodyear  plan 
to  make  any  management 
changes  within  its  IT  depart¬ 
ment  pending  the  outcome  of 
the  ongoing  internal  review, 
the  spokesman  said.  In  addi¬ 
tion,  the  company  has  no 
plans  to  replace  the  affected 
systems  with  new  ones. 

William  Wohl,  a  spokesman 
for  SAP  America  Inc.  in  New¬ 
town  Square,  Pa.,  said  Good¬ 


year  has  been  a  customer 
since  1994  and  described  the 
relationship  between  the  two 
companies  as  “very  successful, 
strong  and  strategic.”  Wohl 
added  that  SAP  is  willing  to 
help  Goodyear  resolve  the 
problems,  but  the  tire  maker 
said  it  doesn’t  expect  to  need 
any  assistance. 

SAP’s  software  is  one  of  the 
most  mature  accounting  appli¬ 
cations  on  the  market,  said 
Karen  Peterson,  an  analyst  at 
Gartner  Inc. 

Noting  that  this  is  the 
biggest  accounting  systems 
failure  she  has  heard  of  in 
recent  years,  Peterson  said  it 
underscores  the  need  for  users 
to  fully  test  new  ERP  systems 
and  carefully  scrutinize  the  fi¬ 
nancial  data  they  produce  be¬ 
fore  going  live  with  the  soft¬ 
ware.  ©  42459 


FINANCE  UPGRADE 

Oracle  plans  to  announce  a  new  release  of 
its  treasury  management  software: 
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Sarbanes-Oxley  Mandates 
Lead  to  IT  Certification  Push 

Corporate  execs  call  on  IT  managers  to 
document  controls  on  finance  systems 


BY  THOMAS  HOFFMAN 

EOs  and  chief  finan¬ 
cial  officers  who  are 
obligated  by  the 
Sarbanes-Oxley  Act 
to  stand  behind  the  financial 
accounting  controls  used  by 
their  companies  are  increas¬ 
ingly  asking  operating  units, 
including  IT,  to  certify  that 
they  have  put  adequate  safe¬ 
guards  in  place. 

“I’m  hearing  a  lot  of  discus¬ 
sion  about  that,”  said  Chris 
McLaughlin,  global  director  of 
financial  services  marketing  at 
FileNet  Corp.,  a  Costa  Mesa, 
Calif. -based  software  vendor 
that  sells  document  manage¬ 
ment  tools  for  use  in  Sarbanes- 
Oxley  compliance  projects. 

With  CEOs  and  CFOs  now 
being  held  accountable  for  the 
accuracy  of  the  financial  re¬ 


porting  at  their  companies, 
“they  are  looking  for  ways  to 
distribute  that  responsibility 
downward  through  their  orga¬ 
nizations,”  McLaughlin  said. 
That  includes  asking  IT  man¬ 
agers  to  certify  the  systems 
used  to  process  financial  data, 
he  added. 

Some  companies  are  doing 
internal  audits  using  certifica¬ 
tion  standards  such  as  SAS  70 
to  give  their  IT  operations  the 
equivalent  of  a  Good  House¬ 
keeping  Seal  of  Approval. 

SAS  70  —  known  formally 
as  the  Statement  on  Auditing 
Standards  No.  70,  Service  Or¬ 
ganizations  —  was  developed 
by  the  New  York-based  Amer¬ 
ican  Institute  of  Certified  Pub¬ 
lic  Accountants  (see  box). 

In  addition,  some  outsourc¬ 
ing  vendors  have  started  offer¬ 


ing  SAS  70  audits  to  their 
clients.  That  was  an  unexpect¬ 
ed  windfall  for  Energy  Ab¬ 
sorption  Systems  Inc.  after  the 
Chicago-based  maker  of  high¬ 
way  crash  barriers  hired  an 
application  service  provider 
(ASP)  earlier  this  year  to  man¬ 
age  its  finance  applications. 

“We  see  them  as  another 
group  to  help  us  improve  on 
our  internal  controls,”  said 
Bob  Latek,  senior  vice  presi¬ 
dent  and  controller  at  Energy 
Absorption  Systems. 

Latek,  who  spoke  at  an  IT 
conference  for  CFOs  last 
month  [QuickLink  42353],  said 
that  letting  the  ASP  run  the 
certification  process  should 
help  his  company  cut  its  Sar¬ 
banes-Oxley  compliance  costs 
in  half  “and  save  us  a  lot  of 
time,  too.” 

Anthony  Noble,  director  of 
IT  audits  at  Viacom  Inc.,  said 
that  at  the  next  meeting  of  the 
company’s  divisional  CIOs  in 


SAS  70 

WHAT  IT  IS:  An  auditing 
standard  designed  to  show  that 
a  “service  organization”  has 
done  an  in-depth  examination 

of  its  internal  controls. 


HOW  IT  WORKS:  Most  cert¬ 
ifications  related  to  Sarbanes- 
Oxley  use  a  so-called  Type  II 
report,  which  describes  the 
controls  plus  provides  for 
detailed  testing  of  them  for 
at  least  six  months. 


SOURCE:  THE  AMERICAN  INSTITUTE  OF 
CERTIFIED  PUBLIC  ACCOUNTANTS 
(WWW.SAS70.COM/ABOUT.HTM) 

January,  he  plans  to  raise  the 
issue  of  whether  the  New 
York-based  parent  company  of 
MTV,  CBS,  Blockbuster  Video 
and  other  entertainment  busi¬ 
nesses  should  conduct  IT  cer¬ 
tifications. 

Noble  said  he  understands 
the  potential  usefulness  of 


such  certifications  as  a  sort  of 
“life  insurance  policy.”  But  he 
added  that  he’s  skeptical  about 
the  way  some  big  auditing 
firms  are  using  SAS  70  as  a 
sales  tool  to  generate  incre¬ 
mental  business  through  Sar¬ 
banes-Oxley  consulting  deals. 

Ed  Trainor,  senior  vice  pres¬ 
ident  of  information  systems 
at  Paramount  Pictures  Corp., 
a  Hollywood-based  Viacom 
unit,  said  IT  certifications  “are 
a  commendable  thing  to  do  for 
a  variety  of  reasons.”  Howev¬ 
er,  they  “require  a  consider¬ 
able  investment,  and  the  bene¬ 
fit  must  be  weighed  against 
other  needs  and  priorities  for 
scarce  resources,”  added 
Trainor,  who  is  also  president 
of  the  Chicago-based  Society 
for  Information  Management. 

The  SAS  70  Type  II  report 
that  companies  can  use  to 
document  the  effectiveness  of 
their  internal  IT  controls  will 
have  to  be  updated  to  meet  re¬ 
quirements  specific  to  Sar¬ 
banes-Oxley,  such  as  quantify¬ 
ing  the  extent  of  testing  done 
on  financial  systems,  said 
Lynn  Edelson,  a  Los  Angeles- 
based  consultant  at  Price- 
waterhouseCoopers.  ©  42512 


Companies  Get  More 
Compliance  Tool  Options 

It’s  welcome  news  for  those  struggling 
to  meet  new  regulatory  requirements 


BY  JAIKUMAR  VIJAYAN 

Companies  looking  for  tools 
to  help  them  monitor  their 
compliance  with  privacy  and 
other  regulatory  requirements 
have  a  couple  of  new  offerings 
to  consider. 

IBM  Global  Services  last 
week  announced  a  service 
aimed  at  helping  corporations 
comply  with  privacy  regula¬ 
tions  related  to  the  collection 
and  use  of  personal  informa¬ 
tion  on  their  Web  sites. 

IBM  will  deliver  the  service 
i  -Elaboration  with  Watch- 
f:  re  Corp.  The  Waltham, 

M  based  security  vendor 
has  been  selling  compliance 
management  software  as  a 
part  of  a  wider  Web  quality 


assurance  product  for  several 
years.  Under  an  agreement  an¬ 
nounced  last  week,  IBM  will 
use  the  Watchfire  technology 
to  deliver  a  subscription- 
based  managed  compliance 
monitoring  service. 

The  service  will  use  Watch- 
fire’s  software  to  monitor  Web 
sites  for  things  such  as  data 
collection  and  sharing  prac¬ 
tices,  opt-in  and  opt-out  choic¬ 
es,  broken  links,  missing  priva¬ 
cy  policies,  third-party  linking 
and  the  use  of  tracking  tech¬ 
nologies,  said  John  Burg,  a  pri¬ 
vacy  services  manager  at  IBM. 

The  company  also  sells 
compliance  technology  called 
Tivoli  Privacy  Manager,  which 
monitors  and  enforces  privacy 


policies  at  the  application  and 
transaction  level.  Watchfire’s 
technology  adds  a  Web  moni¬ 
toring  capability. 

A  company  with  a  Web  site 
that  has  about  10,000  pages 
can  expect  to  pay  $40,000  in 
initial  assessment  and  valida¬ 
tion  costs  and  then  a  monthly 
fee  of  up  to  $15,000  for  IBM’s 
compliance  service,  Burg  said. 

“Humans  couldn’t  possibly 
do  such  automated  monitor¬ 
ing,”  said  Monica  Champion, 
senior  vice  president  of  Inter- 


Privacy  Patrol 


IBM's  compliance 
offering  will  provide: 

■  Assessment  and  validation 
services  to  identify  potential 
problem  areas. 


■  Services  to  help  develop  and 
implement  privacy  policies. 

■  Monitoring  services  to 
ensure  compliance  with 
policies. 


net  and  e-business  at  Atlanta- 
based  SunTrust  Banks  Inc. 

The  bank  is  using  Watch- 
fire’s  WebXM  software  to  scan 
and  monitor  its  Web  site  for 
violations  of  preset  privacy 
policies  [QuickLink  41118].  “It 
allows  you  to  ensure  that  you 
are  doing  what  you  say  you 
are  doing,”  Champion  said. 

Meeting  Mandates 

Meanwhile,  Consul  Risk  Man¬ 
agement  Inc.,  a  Delft,  Nether¬ 
lands-based  company  with 
U.S.  headquarters  in  Herndon, 
Va.,  last  week  rolled  out  soft¬ 
ware  designed  to  help  compa¬ 
nies  monitor  compliance  with 
the  requirements  of  the  Sar¬ 
banes-Oxley  Act. 

The  offering  is  a  module  for 
Consul’s  InSight  Security 
Manager  5.0  suite  of  security 
event  management  and  audit¬ 
ing  software.  The  software  al¬ 
lows  companies  to  monitor 
and  audit  user  access  to  data 
across  a  wide  range  of  operat¬ 
ing  environments,  said  Marc 


vanZadelhoff,  director  of 
product  development  at 
Consul. 

The  Philadelphia  Stock  Ex¬ 
change  is  using  an  early  ver¬ 
sion  of  the  software  to  moni¬ 
tor  user  access  to  a  mix  of 
Unix,  IBM  mainframe  and 
proprietary  Stratus  Technolo¬ 
gies  Inc.  VOS  operating  sys¬ 
tem  environments. 

Consul’s  software  allows  the 
stock  exchange  to  gather  log 
information  from  all  those  sys¬ 
tems  and  present  it  in  a  stan¬ 
dardized  form  in  a  Windows 
system,  said  Bernie  Donnelly, 
the  exchange’s  vice  president 
of  quality  assurance.  “We  want 
to  keep  track  internally  of  who 
is  going  where  and  for  what,” 
Donnelly  said. 

The  starting  price  for  Con¬ 
sul’s  Sarbanes-Oxley  module 
is  $40,000.  ©  42505 


MORE  THIS  ISSUE 

For  related  coverage,  see  "Keeping 
Secrets”  on  page  25  and  Maryfran 
Johnson’s  editorial  on  page  20. 


ENTERPRISE  INTELLIGENCE 

SUPPLIER  INTELLIGENCE 

ORGANIZATIONAL  intelligence 

CUSTOMER  intelligence 

INTELLIGENCE  architecture 


With  Sarbanes-Oxley  compliance  deadlines  less  than  a  year  away,  there  is  an  urgency  to  deliver  financial 
and  operational  transparency  -  one  clean,  consolidated  and  truthful  version  of  data  for  all  your  disclosure 
controls  and  procedures.  SAS®  Corporate  Compliance  software  provides  auditable,  searchable  process 
and  document  control  solutions.  So  you  can  prepare  now,  while  creating  a  system  that  won’t  be  outdated 
when  the  next  new  legislation  is  enacted.  Our  intuitive  interfaces  are  designed  for  users  of  any  skill  level 
-with  a  central  point  of  control  to  manage  across  all  environments  -  and  an  open,  adaptable  architecture. 
To  find  out  more  about  how  to  confidently  comply  with  Sarbanes-Oxley,  including  Section  404,  call  us 
toll  free  at  1  866  270  5729  or  visit  our  Web  site. 


www.sas.com/sox 


The  Power  to  Know* 


SAS  and  all  other  SAS  Institute  Inc.  product  or  service  names  are  registered  trademarks  or  trademarks  of  SAS  Institute  Inc.  in  the  USA  and  other  countries.  ®  indicates  USA  registration. 

©  2003  SAS  Institute  Inc.  All  rights  reserved.  256063US.1003 
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Linux  Group  Adds 
2.6  Test  Release 

Open  Source  Development  Labs 
Inc.  said  a  new  version  of  the  Lin¬ 
ux  2.6  kernel  is  available  for  test¬ 
ing  by  corporate  users  and  soft¬ 
ware  vendors.  The  release,  called 
Test9,  can  be  downloaded  at 
www.kernel.org  or  ftp.kernel.org, 
the  Beaverton,  Ore.-based  non¬ 
profit  company  said.  The  2.6  ker¬ 
nel  is  being  designed  to  support 
increased  scalability,  such  as  the 
ability  to  run  Linux  on  servers 
with  32  or  more  CPUs. 


EDS  Has  Q3  Loss, 
Plans  More  Cuts . . . 

Electronic  Data  Systems  Corp.  re¬ 
ported  a  third-quarter  net  loss  of 
S600,000  and  disclosed  plans  to 
cut  another  2,500  jobs  by  the  end 
of  next  year,  in  addition  to  the 
2,700  positions  it  previously  had 
said  would  be  eliminated.  The  ex¬ 
panded  cutback  will  reduce  the 
Plano,  Texas-based  company’s 
135,000-person  workforce  by 
4%.  EDS  said  revenue  totaled 
$5.24  billion  in  the  third  quarter, 
up  6%  year-over-year. 


. . .  And  Restates 
First-Half  Results 

In  addition,  EDS  lowered  its  re¬ 
sults  for  the  first  half  of  the  year 
after  adopting  new  accounting 
rules  that  require  companies  to 
change  the  way  they  book  rev¬ 
enue  from  long-term  contracts. 
EDS  added  a  $2.24  billion  charge 
to  its  first-quarter  results  and 
said  it  will  now  book  most  con¬ 
tract  revenue  as  payments  are 
received  from  customers. 


Short  Takes 

EQUINIX  INC.  in  Foster  City,  Calif., 
said  it’s  subleasing  a  Web-hosting 
data  center  in  Santa  Clara,  Calif., 
from  SPRINT  CORP.,  which  is  exit¬ 
ing  the  hosting  business  [Quick- 
Litik  39162]. . . .  MICROSOFT 
CORP.  has  agreed  to  settle  anti¬ 
trust-related  class-action  lawsuits 
filed  in  five  states  plus  the  District 
of  Columbia. 


Continued  from  page  1 

Shippers 


sector  will  have  to  pay  for 
most  of  the  upgrades  to  ship¬ 
ping  containers  and  networks 
that  will  enable  officials  to 
know  if  and  when  sensitive 
cargo  has  been  tampered  with. 
And  some  said  it’s  possible  to 
make  the  new  security  require¬ 
ments  pay  for  themselves. 

That  argument  will  be  pre¬ 
sented  this  week  to  the  U.S. 
Department  of  Homeland  Se¬ 
curity  in  a  report  by  the 
Strategic  Council  on  Security 
Technology  (SCST),  an  inde¬ 
pendent  industry  group  of 
port  operators,  shipping  com¬ 
panies  and  IT  vendors. 

Computerworld  obtained  an 
advance  copy  of  the  report,  ti¬ 
tled  “Smart  and  Secure  Trade- 
lanes,”  which  shows  that  the  fi¬ 
nancial  benefits  to  shippers  of 
a  fully  automated  cargo  man¬ 
agement  and  security  system 
would  exceed  the  total  systems 
cost  per  shipping  container. 

The  SCST  conducted  an 
eight-month  test  that  involved 
a  mix  of  commercial  IT  tools, 
including  Web-based  manage¬ 
ment  software,  wireless  tech¬ 
nologies,  electronic  container 
seals,  radio  frequency  identi¬ 
fication  (RFID)  tags  and  exist¬ 
ing  ERP  software.  Sixty-five 
companies  processing  818 
containers  across  three  conti¬ 
nents  demonstrated  potential 
net  savings  to  shippers  of  $378 
to  $462  per  container  per 
shipment.  More  than  6  million 
containers  enter  the  U.S. 
every  year. 

The  test,  which  ended  in 
June,  also  showed  that  shippers 
can  “potentially  derive  both  di¬ 
rect  and  indirect  logistics  effi¬ 
ciencies,”  the  report  concludes. 


Correction 

A  story  that  was  part  of  the 
Salary  Survey  2003  feature  in 
our  Oct.  27  issue  (“Boost  Your 
Chances  of  Getting  a  Raise”)  in¬ 
correctly  identified  Katherine 
Spencer  Lee’s  employer  as  RHI 
Consulting.  The  Menlo  Park, 
Calif.-based  company  has 
changed  its  name  to  Robert 
Half  Technology. 


Potential  Operational 
Savings  to  Shippers 


AREA  OF  SAVINGS 

SAVINGS  AS  A  PERCENTAGE 
OF  CONTAINER  VALUE* 

POTENTIAL 
CONTAINER  SAVINGS 

Administrative  labor 

0.04°/o-0.05°/o 

; 

$31-$38 

Reduction  of 
service  charges 

i 

i 

0.08°/o-0.10% 

S56-S68 

Reduction  of 
pilferage,  inspec¬ 
tions,  loss 

I 

1 

0.04%-0.05°/o 

1 

1 

1 

i 

$28-$34 

Reduction  in 
safety  stock 

0.25°/o-0.30°/o 

« 

1 

1 

S173-S211 

Reduction  in 
pipeline  inventory 

0.13°/o-0.16% 

1 

1 

1 

_ 

$91-6111 

TOTAL 

0.54°/o-0.66°/o 

S379-S462 

NOTE:  Savings  don't  include  potential  reduction  in  transportation  costs. 
*  Based  on  an  average  container  cargo  value  of  $70,000. 


“The  real-time  security  au¬ 
tomation  functionality  gives 
shippers  the  flexibility  to  de¬ 
crease  inventory  safety  stocks, 
increase  customer  service  lev¬ 
els,  or  both.  We  believe  the  in¬ 
cremental  security  and  effi¬ 
ciency  benefits  to  these  supply 
chain  constituencies  and  to  so¬ 
ciety  overall  are  significant.” 

Security  Tools  Desired 

One  improvement  that  would 
benefit  both  shippers  and  their 
customers,  such  as  large  retail 
outlets,  is  the  ability  to  lever¬ 
age  new  security-tracking  tools 
and  networks  to  detect  routing 
changes  and  estimated  arrival 
times,  according  to  the  report. 

“The  combination  of  RFID 
infrastructure  and  software 
tests  identified  that  5%  of 
the  correctly  registered  and 
tracked  containers  deviate  sig¬ 
nificantly  from  their  assigned 
routing,”  the  report  states.  In 
total,  35  containers  had  vessel, 
scheduling  or  routing  data  that 
differed  drastically  from  reality. 

Steve  Lambright,  vice  presi¬ 
dent  of  technology  marketing 
at  Savi  Technology  Inc.  in 
Sunnyvale,  Calif.,  and  one  of 
the  authors  of  the  SCST  re¬ 
port,  said  the  study  included  a 
test  of  the  current  manual 
processes  used  to  monitor  the 
integrity  of  mechanical  con¬ 
tainer  seals  throughout  vari¬ 
ous  points  in  the  shipping 
process.  According  to  Lam¬ 
bright,  in  60%  of  cases,  the 
shipper  didn’t  receive  any  re¬ 


ports  on  the  integrity  of  the 
container  seals. 

In  addition,  in  the  40%  of 
cases  where  the  status  of  con¬ 
tainer  seals  was  reported,  the 
serial  number  of  the  container 
was  wrong  more  than  half  the 
time.  In  a  follow-up  test  of 
three  containers  that  involved 
deliberately  broken  security 
seals,  only  one  container  was 
reported  as  being  opened,  but 
with  the  wrong  serial  number. 

Douglas  Browning,  deputy 
commissioner  of  the  U.S.  Bu¬ 
reau  of  Customs  and  Border 
Protection  at  the  DHS,  said  the 


cost  of  upgrading  shipping 
containers  with  new  electronic 
capabilities  and  of  developing 
new  containers  and  infrastruc¬ 
tures  from  scratch  pales  in 
comparison  to  the  cost  of  al¬ 
lowing  a  single  terrorist  attack 
to  take  place  at  a  U.S.  port. 

Given  the  real-time  nature 
of  the  U.S.  economy,  the  total 
losses  from  an  attack  against 
the  port  of  Los  Angeles,  for 
example,  “would  be  cata¬ 
strophic,”  said  Browning,  not¬ 
ing  that  most  of  the  country’s 
trade  routes  would  be  closed 
down  as  a  result. 

“I  know  these  figures  ap¬ 
pear  to  be  astronomical,”  he 
said,  referring  to  the  UN  cost 
estimate.  “However,  they  rep¬ 
resent  one-tenth  of  the  total 
[value]  of  the  cargo  that  tran¬ 
sits  the  port  of  Los  Angeles  on 
an  annual  basis.” 

During  a  presentation  on 
cost  sharing  by  Michael  Con¬ 
ners,  an  analyst  at  Booz  Allen 
Hamilton  Inc.  in  McLean,  Va., 
an  attendee  criticized  the  anti¬ 
security  lobbying  efforts  of 
large  retailers  reluctant  to  pay 
higher  prices  for  their  inven¬ 
tories.  Wal-Mart  Stores  Inc. 
was  cited  as  one  example. 

“Wal-Mart  speaks  loudly,” 
said  Conners.  Bentonville, 
Ark.-based  Wal-Mart  didn’t  re¬ 
spond  to  Computerworld’ s  re¬ 
quest  for  comments.  ©  42509 


‘Smart’  Containers 
Coming  This  Month 

NEW  YORK 

As  part  of  the  Department  of  Home¬ 
land  Security’s  Container  Security 
Initiative  (CSI),  a  group  of  shipping 
companies  later  this  month  will  be¬ 
gin  using  new  “smart”  containers 
equipped  with  high-tech  devices 
that  will  enable  officials  to  deter¬ 
mine  if  cargo  has  been  tampered 
with  prior  to  entering  a  U.S.  port. 

Although  cargo  shipments  des¬ 
tined  for  U.S.  ports  won’t  be  required 
to  use  the  new  containers,  the  feder¬ 
al  government  has  kick-started  an 
effort  to  encourage  greater  use  of 
the  technologies  by  private  trans¬ 
portation  companies,  said  Douglas 
Browning,  deputy  commissioner  for 
the  Bureau  of  Customs  and  Border 
Protection  (CBP)  at  the  DHS. 

In  addition,  as  part  of  the  CSI 


program,  the  top  19  ports  outside 
the  U.S.  have  agreed  to  inspect 
outbound  containers  before  depar¬ 
ture.  Browning  said  plans  call  for  a 
total  of  47  ports  to  be  taking  part  in 
the  program  by  this  time  next  year. 

Browning  also  said  the  24-hour 
advanced  electronic  manifest  re¬ 
porting  rule  that  the  U.S.  put  into 
place  last  December  has  been  work¬ 
ing  well.  “We’ve  received  more  than 
7  million  bills  of  lading,  and  of  those, 
we  have  only  had  to  issue  600  de¬ 
nials  of  lading,”  said  Browning. 

The  CBP  has  also  proposed  a 
rule  that  would  require  electronic 
notification  in  advance  of  changes 
to  cargo  before  it  can  enter  the 
U.S.,  Browning  said.  “The  advance 
collection  of  this  data  directly  im¬ 
pacts  our  ability  to  keep  terrorists 
and  the  implements  of  terror  from 
crossing  our  border,”  he  noted. 

-  Dan  Verton 
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Hyper-Security. 


Hyper-Threading  Technology  from  Intel. 

kWhy  choose  between  PC  security  and 
PC  performance?  The  Inter  Pentium*  4 
Processor  with  HT  Technology  is 
engineered  to  let  PCs  do  two  things  at 
once  —  without  the  frustrating  lags.*  So 
you  can  run  a  background  virus  scan 
as  you  get  some  real  work  done. 

Get  all  the  details  at  intel.com/go/ht. 


intel. 


'Look  for  systems  with  the  Intel®  Pentium®  4  Processor  with  HT  Technology  logo  which  your  system  vendor  has  verified  utilize  Hyper-Threading  Technology.  Performance  will  vary  depending  on  the  specific  hardware 
and  software  you  use.  See  www.intel.com/info/hyperthreading  for  information.  ©2003  Intel  Corporation.  Intel  and  the  Intel  Inside  logos  plus  Pentium  are  trademarks  or  registered  trademarks  of  Intel  Corporation  or 
its  subsidiaries  in  the  United  States  and  other  countries.  All  rights  reserved. 
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3  SERVERS  ARE  ABOUT  TO  GO  DOWN 


ONE  OF  THEM  WILL  LOSE 
CUSTOMERS  PER  MINUTE. 
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CAN  YOUR  SOFTWARE  TELL  YOU  WHICH  ONE? 
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services  like  sales,  customer  service,  online  transactions,  logistics  v 

and  distribution — whatever  is  most  critical  to  your  company's  success. 

. 

It's  enterprise  management  software  that  works  with  your  existing  IT 

resources  to  let  you  manage  what  matters  from  a  business  perspective  SSI 

;  . 

and  execute  with  precision.  Find  out  how  at  www.bmc.com/bsrn2  i,  " 


Business  Service  Management  solutions  from  BMC  Software®  can.  In  fact, 
they  let  you  predict  critical  performance  problems  and  resolve  them 
before  they  ever  impact  your  business.  And  you  can  prioritize  IT 
management,  investments  and  resource  allocations  to  optimize  your 
business  performance.  So  you  can  solidly  align  your  IT  investments 
with  strategic  business  goals.  And  protect  the  delivery  of  vital  business 
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Privacy  Rules:  Y3k? 


CITING  PRIVACY  LAW,  Senators  Seek 
Probe  of  JetBlue,”  read  the  headline 
on  our  Web  site  [QuickLink  42295],  re¬ 
ferring  to  the  airline’s  legal  and  publici¬ 
ty  problems  after  handing  personal 
information  on  some  5  million  passengers  over  to  a 
Pentagon  contractor. 


Now  substitute  your 
company’s  name  for  Jet¬ 
Blue. 

On  a  visceral  level,  you 
just  got  the  core  sales 
pitch  behind  the  wave  of 
products  rolling  across 
the  privacy  frontier.  Risk 
avoidance  of  the  most  se¬ 
rious  business  kind  —  the 
kind  that  impacts  cus¬ 
tomer  relationships  and 
business  reputations  for¬ 
evermore.  That’s  also  why 
the  biggest  driver  of  IT  spending  in 
2004  is  likely  to  be  compliance  with 
the  daunting  list  of  new  laws  and 
regulations  affecting  data  privacy, 
protection  and  management. 

“Privacy  is  no  longer  just  about 
the  right  way  of  doing  things;  it  is 
also  the  legal  way  of  doing  things,” 
says  Michelle  Boggess,  electronic 
data  security  coordinator  at  Baptist 
Health  Care  in  Florida.  She’s  quoted 
in  our  “Keeping  Secrets”  story  on 
page  25  [QuickLink  42105]  about  the 
array  of  products  for  monitoring  and 
enforcing  privacy  regulations. 

And  quite  an  array  it’s  becoming. 

Privacy  products  are  lining  up  to 
compete  in  this  regulatory  whack-a- 
mole  game.  Some  are  created  ex¬ 
pressly  for  the  compliance  niche; 
some  are  being  “repurposed”  from 
their  original  roles  as  spam  filters  or 
quality  assurance  or  Web  site  man¬ 
agement  tools.  Almost  any  product 
with  a  data  management  or  monitor¬ 
ing  spin  will  take  a  turn  as  a  privacy 
o  egulatory  compliance  “solution.” 

IBM  last  week  joined  the  fray  with 
a  bundled  offering  of  hardware,  soft¬ 
ware  and  services.  The  requisite  ana¬ 
lyst  cooing  over  the  announcement 
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made  note  of  the  com¬ 
prehensive,  integrated 
nature  of  the  products. 
Not  so  coincidentally, 
IBM’s  emphasis  on  the 
automated  processes 
these  products  enable 
fits  neatly  into  its  overall 
“on-demand”  computing 
strategy.  But  IBM  has 
grander  intentions  than 
selling  compliance  soft¬ 
ware.  The  real  message 
is  for  companies  to 
leverage  this  compliance  mandate 
and  retool  entire  IT  systems  and 
business  processes. 

Sounds  familiar,  doesn’t  it?  That 
same  message  sold  a  lot  of  ERP  sys¬ 
tems  in  the  late  ’90s,  and  that  echo 
isn’t  lost  on  senior  IT  managers. 
Some  have  nervously  dubbed  this 
round  “Y3k,”  although  nobody  can 
wait  till  the  end  of  this  millennium 


to  solve  the  problem.  IT  executives 
are  also  mindful  that  corporate  hind¬ 
sight  wasn’t  kind  to  the  overspend¬ 
ing  that  Y2k  code  fixes  involved. 
Combined  with  the  subsequent  ex¬ 
cesses  of  the  dot-com  era,  IT  was  left 
(unfairly,  perhaps)  with  a  significant 
credibility  gap  on  the  business  side. 

So  here  we  are  with  another  bus¬ 
iness  crisis  looming,  and  IT  the  re¬ 
luctant  savior.  But  this  is  clearly  a 
leadership  moment,  a  chance  for  IT 
to  regain  credibility  with  CFOs  and 
CEOs.  What  makes  Y3k  different 
from  Y2k?  I  think  it’s  the  level  of 
business  understanding  of  what’s  at 
stake.  This  time,  unlike  some  geeky 
code  fix,  it’s  about  legal  penalties, 
customer  losses  and  company  repu¬ 
tations. 

But  IT  leaders  need  to  get  in  this 
game,  especially  now  that  the  prod¬ 
ucts  are  proliferating.  Be  front  and 
center  with  advice  for  CFOs,  audi¬ 
tors,  risk  managers  and  compliance 
officers.  Only  IT  can  evaluate  the 
technologies  vendors  are  throwing 
at  the  compliance  problem.  Only  IT 
can  enable  the  kind  of  business  proc¬ 
ess  integration  that  needs  to  happen. 

Most  important,  only  IT  can  en¬ 
sure  that  Y3k  doesn’t  become  future 
shorthand  for  another  technology 
overspending  hangover.  ©  42471 


PIMM  FOX 

Squeegee  IT 
Grows  Up 

IT  ISN’T  GLAMOROUS,  but 
it  works. 

That’s  what  I  think  of 

screen-scraping  technology. 

But  I  didn’t  always  feel  that  way.  The 
transition  from  constrained  green- 
screen  legacy  systems  to  sleek  Web- 
based  formats  replete  with  Java  scripts 
and  XML  messaging  seemed  too  much 
to  handle  for  plebeian  scraping  tech¬ 
nology. 

Then  I  learned  about  how  Indiana 
Farm  Bureau  Inc.  (www.infarmbu.reau. 
com )  used  technology  from  Israel- 
based  Jacada  Ltd.  to  transform  multiple 
screen  presentations  into  a  simplified, 
easier-to-comprehend  graphical  layer. 

The  Indianapolis-based  insurance 
operation  didn’t  want  to  spend  lots  of 
money,  because  CIO  Greg  Clancy  felt 
that  the  Computer  Sciences  Corp.  pro¬ 
gram  running  on  its  IBM  AS400  host 
was  perfectly  adequate. 

“In  a  lot  of  legacy  systems,  you  have 
all  you  need  to  per¬ 
form.  The  function¬ 
ality  exists,”  he  says. 

“You  just  want  to 
shield  users  from  the 
system’s  quirks.” 

Those  quirks  in¬ 
cluded  wonders  of 
past  computing  like 
entering  multiple 
codes  just  to  access 
different  functions, 
such  as  getting  insur¬ 
ance  quotes  from  the 
application.  Training 
users  on  the  20-year-old  system  typi¬ 
cally  took  weeks,  another  issue  Clancy 
wanted  to  address. 

I  confess  to  being  dubious  about 
wrapping  technology  around  technolo¬ 
gy,  because  I  think  it  retards  function¬ 
ality,  particularly  when  it  comes  to  se¬ 
curity.  But  Goutam  Kundu,  director  of 
technology  at  Indiana  Farm  Bureau, 
says  all  transactions  coming  from  the 
back  end  pass  through  the  Jacada  serv¬ 
er,  use  128-bit  encryption  in  the  form 
of  a  cookie,  and  afford  users  one  place 
to  log  on  for  the  entire  application.  He 
also  says  the  new  graphical  user  inter¬ 
face  has  enhanced  user  productivity. 

Developed  completely  in  Java  with 
open-ended  modules  so  you  can  tack 
on  your  own  Java  code,  Jacada’s  tools 
have  drop-down  windows  to  make  it 


pimm  fox  is  a  freelance 
writer  in  Santa  Barbara 
Calif.  Contact  him  at 

pimmfox@pacbetl.net. 


C9MFUTERWQRLD  November  3, 2003  21 


www.computerworld.com 


OPINION 


easier  for  developers  to  make  changes. 
In  addition,  the  new  presentation  layer 
is  deployed  via  the  Web  using  the  com¬ 
pany’s  intranet,  opening  up  the  possi¬ 
bility  of  integrating  other  XML-friend- 
ly  applications. 

And  since  members  of  the  field  sales 
force  were  already  using  a  PC  applica¬ 
tion,  they  needed  very  little  training  to 
move  from  the  25-screen  CICS  applica¬ 
tion  to  the  GUI  with  just  two  screens. 
The  450  agents  in  131  offices  now  train 
using  self-directed  education  along 
with  a  short  orientation  course. 

Not  every  adaptation  is  going  to  be 
completed  in  six  months,  nor  will 
every  GUI  obviate  fiddling  with  the 
business  logic.  I  still  think  there  are  in¬ 
stances  where  remapping  and  refitting 
legacy  applications  isn’t  going  to  be 
accomplished  by  seamless,  low-cost 
Java  tools. 

But  if  what  you’re  after  is  bridge 
technology  to  extend  vendor  packages 
that  you  plan  to  use  for  many  years  — 
without  big  modifications  —  then  go 
on,  scrape  away.  ©  42397 

THORNTON  A.  MAY 

Organize  for 
Innovation 

Organizational  re¬ 
structuring  is  one  of 
the  most  frequently 
used  tools  at  an  IT  leader’s 

fingertips.  Sadly,  most  reorganization 
efforts  fail  to  significantly  improve  a 
department’s  performance.  The  search 
continues  for  IT  organizational  struc¬ 
tures  that  are  able  to  do  a  better  job 
delivering  the  full  value  inherent  in  the 
department’s  powerful  technologies. 

In  workshops  I  recently  conducted 
at  the  Cisco  CIO  Summit  and  the  inau¬ 
gural  meeting  of  the  Executive  10  of 
Oregon  (the  CIOs  of  the  10  largest  or¬ 
ganizations  in  the  rain  state),  deep¬ 
thinking  IT  leaders  grappled  with  how 
they  might  better  structure  their  IT 
shops.  We  focused  on  three  issues: 

■  What  is  driving  IT  organizational 
change? 

■  What  is  wrong  with  the  current 
structure? 

■  What  are  some  principles  for  de¬ 
signing  effective  IT  shops? 

And  here’s  what  we  learned.  Organi¬ 
zational  change  is  driven  by  a  combi¬ 
nation  of  these  five  stimuli: 

■  New  guy/new  strategy  —  a  new  C- 
level  executive  shows  up  and  starts  re¬ 


arranging  the  furniture. 

■  A  catastrophic  faux  pas 
—  something  goes  terribly 
wrong  and  the  enterprise 
responds  structurally  to 
fix  it. 

■  Merger/acquisition/in¬ 
dustry  consolidation. 

■  Regulatory  require¬ 
ments. 

■  Mind-set  change  — 
somebody  high  up  in  the  or¬ 
ganization  believes  there  is 
a  more  rational  way  to  orga¬ 
nize  IT  resources. 

Our  industry  bulges  with  examples 
of  IT  reorgs  gone  wrong.  At  the  Center 
for  Advancing  Business  Through  In¬ 
formation  Technology,  we’re  examin¬ 
ing  the  structural  pathologies  that  get 
in  the  way  of  IT  reorganizations  being 
successful.  The  biggest  reason  IT  re¬ 
structurings  fail  is  that  they  don’t  ad¬ 
dress  the  entire  technology  life  cycle. 
Full-circle  IT  involves  the  following 
nine  critical  steps: 

1.  Conceiving  an  opportunity:  What  do 
we  want  technology  to  do  for  us? 

2.  Contextualizing  IT  opportunities: 
Examine  IT  projects  in  the  context 
of  organizational  mission  and  re¬ 
sources  and  compare  them  against 


other  projects. 

3.  Simulating:  What  will 
our  workplace  be  like 
when  the  project  is  done? 
How  will  workplace  behav¬ 
iors  change? 

4.  Choosing:  The  process 
whereby  executives  allo¬ 
cate  IT  resources. 

5.  Designing:  The  blue¬ 
print  of  what  the  system 
will  deliver  and  how  the 
system  will  work. 

6.  Building:  Moving  from 
drawing  board  to  desktop. 

7.  Deploying:  Getting  the  technology 
into  the  workplace. 

8.  Operating/maintaining:  Making  sure 
it  works. 

9.  Retiring:  Making  sure  that  technol¬ 
ogy  that’s  no  longer  relevant  or  no 
longer  optimal  is  removed. 

Survivors  of  failed  IT  reorganizations 
group  their  lessons  into  three  buckets: 
innovation,  operation/optimization 
and  collaboration.  The  ability  to  bal¬ 
ance  optimization  with  innovation  in 
every  major  work  process  in  the  enter¬ 
prise  is  the  sought-for,  seldom-achieved 
goal.  For  example,  airlines  have  achieved 
Six  Sigma  standardization  regarding 
in-air  safety  but  only  Two  Sigma  effi¬ 


ciency  for  baggage  handling. 

Most  IT  organizations  structure 
themselves  to  give  users  exactly  what 
they  want  (that  is,  they  are  highly  col¬ 
laborative)  at  the  expense  of  opera¬ 
tional  efficiency;  undertake  experi¬ 
ments  at  the  expense  of  operational  ef¬ 
ficiency;  or  dramatically  restrict  tech¬ 
nology  choices  and  operate  highly  effi¬ 
cient  IT  shops  at  the  expense  of  inno¬ 
vation  and  collaboration. 

According  to  the  best  IT  shops,  you 
should  instead  organize  to  gain  control 
over  the  IT  supply  chain.  For  example, 
use  access  to  the  network  as  a  behav¬ 
ioral  modifier  to  make  sure  that  busi¬ 
ness  units  can’t  do  mood-based  tech¬ 
nology  procurement.  In  that  way,  off- 
the-reservation  technology  doesn’t  get 
on  the  corporate  network.  However, 
you  must  create  a  visible  process  for 
business  units  to  obtain  exceptions  to 
enterprise  standards. 

Finally,  you  need  to  formalize  the 
structure  for  innovation  and  reward  in¬ 
novative  technology  ideas  emerging 
from  business  units.  ©  42405 
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Insightful  Look  at 
IT/User  Interaction 

AUL  GLEN'S  Oct.  6  column 
["Stop  'Gathering'  IT  Require¬ 
ments,"  QuickLink  41565]  nailed 
the  situation  on  the  head.  In  my  ex¬ 
perience,  getting  the  proper  under¬ 
standing  between  users  and  tech¬ 
nicians  is  the  Achilles’  heel  of  to¬ 
day’s  business  environment.  The 
technicians  prefer  the  path  of  least 
resistance:  take  a  few  notes  and  go 
off  to  reinterpret  reality  according 
to  what's  convenient  and  exciting 
for  them.  The  users,  certain  that 
they’re  about  to  be  drowned  in 
technical  terms  and  abstractions, 
would  rather  be  anywhere  else. 

As  a  consultant,  I've  had  the 
good  fortune  to  learn  some  great 
techniques.  As  the  session  unfolds, 
everyone  begins  to  see  that:  1)  no¬ 
body  really  has  a  firm,  clear  defini¬ 
tion  of  the  business  data  and  how  it 
interrelates;  and  2)  getting  that 
firm,  clear  definition  is  a  lot  of  hard 
work.  I’ve  had  sessions  where  par¬ 
ticipants  who  came  expecting  to  be 
bored  to  tears  departed  wrung  out 


from  the  rigors  of  being  forced  to 
think  about  their  data  reality  to  a 
depth  they  had  never  had  to  before. 
(I  compare  it  to  taking  an  SAT  test 
every  day  for  three  solid  days.) 

Every  technician  should  read 
Paul’s  column,  and  those  responsi¬ 
ble  for  interacting  with  users  should 
frame  it.  Thanks  to  Computerworld 
for  publishing  this  insightful  piece. 
Perhaps  if  more  of  us  keep  sound¬ 
ing  this  horn,  eventually  the  indus¬ 
try  will  listen. 

Roger  B.  Thomas 
Principal,  JCK, 

Port  Huron,  Mich., 
roger@jckconsulting.com 


Long-term  Goals 
Must  Drive  Budgets 

Shame  ON  CIOs  andCxOswho 
permit  security  managers  to 
scare  them  into  budget  changes 
[“Scare  Tactics  No  Longer  Guaran¬ 
tee  Security  Funding,”  QuickLink 
42025],  In  good  times  and  bad, 
poor  management  results  in  lost 
dollars  and  opportunities.  More  se¬ 
curity  for  privacy  and  record-keep¬ 


ing  means  the  focus  on  the  bottom 
line  needs  to  be  sharpened. 

Changes  within  the  organization 
are  always  an  opportunity  to  im¬ 
prove  performance  and  reach 
goals,  but  senior  managers  must 
keep  their  eyes  on  the  several  balls 
they’ve  decided  to  juggle.  Allowing 
daily  events  like  the  latest  security 
problem  to  drive  budgets  and 
strategic  goals  is  like  going  outside 
the  house  to  swat  flies.  A  security 
manager  should  go  back  to  the  se¬ 
curity  policy  and,  after  checking  for 
consideration  of  regulatory  require¬ 
ments,  make  sure  the  policy  ulti¬ 
mately  drives  budget  requests. 
Dave  Kendall-Sperry 
President,  K&S  Services, 
Dublin,  Ohio,  DaKendall@ 
Columbus.RR.com 


Grid  Article  Didn’t 
Go  Deep  Enough 

Although  i  find  Gary  H.  An- 
thes'  article  “Grids  Extend 
Reach”  [QuickLink  41610]  very  in¬ 
teresting,  it  is  also  very  narrow  in 
scope.  It  focuses  only  on  the  appli¬ 


cation  layer.  The  grid  addresses 
other  layers  of  the  IT  infrastructure 
as  well,  such  as  the  pooling  and 
sharing  of  resources  at  the  storage, 
database  server  and  application 
server  levels.  And  contrary  to  the 
article,  most  commercial  applica¬ 
tions  don’t  need  to  be  rewritten  to 
take  advantage  of  many  aspects  of 
grid  technology  being  pioneered  by 
Oracle  Corp.  in  Oracle  lOg  (now  in 
beta  testing). 

R.  David  Peterson 
Senior  technology  consultant, 
Los  Angeles,  RDavidPeterson 
@Yahoo.com 
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Dell  Rated  #1  in  Intel-Based  Server  Satisfaction 

21  Out  of  22  Consecutive  Quarters 
Technology  Business  Research 
Corporate  IT  Buying  Behavior  and  Customer  Satisfaction  Study 

First  Quarter  2003 
—July  2003 


Call.  M  F’a  SpSa;  8a -5p,  CT 

a  th,  Actions,  availability  and  terms  of  offer  may  change  without  notice.  Taxes  and  shipping  charges  extra,  and  vary  and  not  subject  to  discounts.  U  S  Dell  Small  Business  new  purchases  only  Dell  cannot  be  held  responsible  for  errors  in  typography  or  photography.  ‘This  device  has  not  been  approved 
ration?.  Commission  for  use  in  a  residential  environment  This  device  is  not,  and  may  not  be,  offered  for  sale  or  lease,  or  sold  or  leased  for  use  in  a  residential  environment  until  the  approval  of  the  FCC  has  been  obtained.  ‘Service  may  be  provided  by  third  party.  Technician  will  be  dispatched 
"■winy  ph  nr-oased  troubleshooting  Subject  to  parts  availability,  geographical  restrictions  and  terms  of  service  contract.  Service  timing  dependent  upon  time  of  day  call  placed  to  Dell.  U.S.  only.  J/DDR  333  memory  runs  at  320MHz  when  used  with  800MHz  FSB  processors.  ’'Monthly  payment  based  on 
.  >!■  r  mice  for  48-month  60  Days  SameAs-Cash-QuickLoan  with  46  payments  at  9.99%  interest  rate.  Your  interest  rate  and  monthly  payment  may  be  same  or  higher,  depending  on  your  creditworthiness.  If  you  do  not  pay  the  balance  within  60  days  of  the  QuickLoan  Commencement  Date  (which  is  five 
j-  ;  oductshioFi.  -nterest  w  T  accrue  during  those  first  60  days  and  a  documentation  fee  may  apply.  OFFER  VARIES  BY  CREDITWORTHINESS  OF  CUSTOMER  AS  DETERMINED  BY  LENDER.  Minimum  transaction  size  of  $500  required.  Maximum  aggregate  financed  amount  for  the  paperless  acceptance 


File&Print  Servers 


From  entry-level  towers  to  robust 
rack-mountable  solutions  that  fit 
existing  infrastructures. 


/VfWPOWEREDGE™  400SC  SERVER 


Small  Business  Value  Server 

•  Intel®  Celeron®  Processor  at  2GHz 

•  Upgradable  to  Intel®  Pentium®  4  Processor  at  3  20GHz 
with  800MHz  Front  Side  Bus" 

•  128MB  333MHz  ECC  DDR  SDRAM  (Up  to  4GB) 
•40GB  (7200  RPM)  IDE  Hard  Drive 

•  Upgradable  to  240GB  of  Internal  Hard  Drive  Storage 

•  Embedded  Intel®  PRO  Gigabit*  NIC 

•  1-Yr  24x7  Dedicated  Server  Phone  Tech  Support 

•  1-Yr  Next  Business  Day  On-Site  Service* 1 

•  Small  Business  Pricing 


E-VALUE  Code:  20257-S21103g 


/VfWPOWEREDGE™  650*  RACK  SERVER 


1U  Value  Rack  Server 

•  Intel®  Pentium®  4  Processor  at  2  40GHz 

•  Upgradable  to  Intel®  Pentium®  4  Processor  at  3.06GHz 

•  256MB  266MHz  ECC  DDR  SDRAM 

•  Upgradable  to  3GB  of  SDRAM 

•  40GB  (7200  RPM)  IDE  Hard  Drive 

•  Upgradable  to  146GB  of  Internal  Hard  Drive  Storage 

•  ATA  100  IDE  RAID  Controller  Available 

•  Intel®  PRO  Gigabit”  NIC 

•  3-Yr  Next  Business  Day  On-Site  Service1 

•  Small  Business  Pricing 

Cl  1 Q  Q  as  low  as  $32/mo ,  (46  pmts1") 

I  |  E-VALUE  Code:  20257- S21 1 1 1  g 


Database&Web  Application-specific  servers 
HoStinQ  Servers  that  can  meet  most  any  challenge. 


POWEREDGE™  2600  TOWER  SERVER 


Multi-Use  Tower  Server 

•  Intel®  Xeon"  Processor  at  2.40GHz 

•  Dual  Intel®  Xeon”  Processor  Capable  (Up  to  3.06GHz) 

•  512MB  266MHz  ECC  DDR  SDRAM 

•  Upgradable  to  6GB  of  SDRAM 

•  36GB  (10K  RPM)  Ultra320  SCSI  Hot-Swap  Hard  Drive 

•  Active  ID  Bezel  for  Monitoring  System  Health 

•  3-Yr  Next  Business  Day  On-Site  Service5 

•  Small  Business  Pricing 

C  ^  T  as  low  as  S49/mo„  (46  pmts5") 

I  /  E-VALUE  Code:  2Q2S7- S21 1 17g 


/VfWPOWEREDGE™  1750*  RACK  SERVER 


Feature-Rich  1U  Rack  Server 

•  Intel®  Xeon"  Processor  at  2.40GHz 

•  Dual  Intel®  Xeon"  Processor  Capable  (Up  to  3.06GHz) 

•  1GB  266MHz  ECC  DDR  SDRAM  (Up  to  8GB) 

•  36GB  (1  OK  RPM)  Ultra320  SCSI  Hot-Swap  Hard  Drive 

•  Integrated  Dual-Channel  Ultra320  SCSI  Controller 

•  Active  ID  From  Bezel  for  Monitoring  System  Health 

•  3-Yr  Next  Business  Day  On-Site  Service1 

•  Small  Business  Pricing 

as  low  as  $55/mo ,  (46  pmts*) 

E-VALUE  Code:  20257- S21 120g 


Dell  offers  a  wide  range  of  reliable,  award-winning  technology,  all  delivered 
from  a  single  point  of  contact — and  our  expert  sales  associates  are  there  to 
help  you  find  the  technology  that's  right  for  your  business 


Once  you've  selected  the  right  technology,  Dell  can  help  you  get  it  up  and 
running  quickly  and  cost-effectively  with  our  custom  on-site  installation 
and  configuration  services. 


After  installation,  Dell  can  help  turn  your  employees  or  IT  staff  into  experts 
on  your  new  technology  through  a  variety  of  training  and  certification 
courses — helping  increase  your  business'  long-term  productivity. 


Service  &  Support 


The  support  doesn't  end  at  the  sale.  Dell's  award-winning  service  and  support 
offerings  help  ensure  that  your  new  network  remains  up  and  running — with 
Web,  phone  or  on-site  service3  and  support. 


4-Way  Servers 

Handle  intense  networking  needs  with  ease. 

POWEREDGE  ”  6600*  TOWER  SERVER 


High-Speed  Mission  Critical  Server 

•  Up  to  Four  Intel®  Xeon"  Processors  at  1 ,50GHz 

•  Up  to  32GB  DDR266  ECC  SDRAM 

•  Up  to  1752GB  Maximum  Internal  HDD  Storage 

•  Embedded  Ultra  SCSI  Adaptec®  |160MB/s)  Controller 

•  Standard  Hot-Swap  Hard  Drives,  Hot-Swap  Redundant 
Fans  and  Hot-Swap  Redundant  Power  Supplies 

•  10  Hot-Plug  PCI-X  Slots 

starting  at 

^sOQQQ  as  low  as  $107/mo.,  (46  pmts.®) 

E-VALUE  Code:  20257-S21139g 


Storage  Options 

Cost  efficient  file  storage  to 
enhance  your  network. 

1 

Network  Switches 

Scalable,  high-performance  switches 
to  enhance  your  network. 

i 

DELL"  POWERVAULT™  725N  NAS 

if 

POWERCONNECT™  3324*  SWITCH 

Optimized  File  Storage  Across  the  LAN 

•  Intel®  Celeron®  Processor  at  2GHz 

•  Microsoft*  Windows*  Powered  Network  Attached  Storage 

•  384MB  DDR  SDRAM  (Up  to  3GB) 

•  4x40GB  (160GB)  IDE  Hard  Drives 

•  Up  to  1 TB  of  Internal  Storage  Capacity 


$1799 


as  low  as  $49/mo„  (46  pmts*) 

E-VALUE  Code:  20257-S21117 


DELL/EMC 


If  you  have  more  than  300GB  of  storage,  visit 

www.dell.com/storage4mybiz  for  low  prices  on 
Dell/EMC  storage  arrays. 


High-Performance  Workgroup  Switch 

•  24  Fast  Ethernet  Ports  plus  2  Gigabit  Uplinks  (2  Copper 
and  2  SFP  Transceiver  Combo  Slots  for  Fiber) 

•  Stacking  Functionality  of  Up  to  192  Ports 

•  Advanced  Network  Management  and  Security  Features 

•  Industry  Standard  CLI  and  Easy-to-Use  Web  Interface 

•  3-Yr  Next  Business  Day  Advanced  Exchange 
Service"  Standard 


as  low  as  $14/mo„  (46  pmts?”) 

E-VALUE  Code.  20257-S11104 


Solutions  that  fit. 


Easy  as 


Click  www.dell.com/bizsolutions  Call  1 


not  to  exceed  $25  000  If  your  order  exceeds  $25K,  a  Dell  Financial  Services  rep  will  contact  you  to  process  your  documentation  Taxes,  fees  and  shipping  charges  are  extra  and  may  vary.  Not  valid  on  past  orders  or  financing  QuickLoan  arranged  by  CIT  Bank  to  Small  Business 
customers  with  approved  credit.  “This  term  indicates  compliance  with  IEEE  standard  802.3ab  tor  Gigabit  Ethernet,  and  does  not  connote  actual  operating  speed  of  IGB/sec.  For  high-speed  transmission,  connection  to  a  Gigabit  Ethernet  server  and  network  infrastructure  is  required 
“Technician  replacement  part  or  unit  (depending  on  service  contract)  will  be  dispatched,  if  necessary,  following  phone-based  troubleshooting  in  advance  of  receipt  of  returned  defective  unit  Service  may  be  provided  by  third-party  provider.  Subject  to  parts  availability,  geographical 
restrictions  and  terms  of  service  contract.  Service  timing  dependent  upon  time  of  day  call  placed  to  Dell  Defective  unit  must  be  returned.  Replacements  may  be  refurbished.  U  S.  only.  Dell,  the  stylized  E  logo,  E-Value,  PowerEdge,  PowerConnect  and  PowarVault  are  trademarks 
of  Dell  Inc'  Intel  Intel  Inside  the  Intel  Inside  logo  Intel  Xeon  the  Intel  Xeon  logo,  Pentium  and  Celeron  are  trademarks  or  registered  trademarks  of  Intel  Corporation  or  its  subsidiaries  in  the  United  States  and  other  countries.  ©2003  Dell  Inc.  All  rights  reserved. 


Online  For  j 
Latest  Prices  I 
and  Weekly  j 
y  Promotions  j 


For  your  next  generation  of  applications,  move 
to  the  next  generation  of  database  technology. 

Cache  is  the  post-relational  database  that  com¬ 
bines  high-performance  SQL  for  faster  queries  and 
an  advanced  object  database  for  rapidly  storing 
and  accessing  objects.  With  Cache,  no  mapping 
is  required  between  object  and  relational  views  of 
data.  That  means  huge  savings  in  both  development 
and  processing  time. 

Applications  built  on  Cache  are  massively  scala¬ 
ble  and  lightning-fast.  Plus,  they  require  minimal  or 
no  database  administration. 

More  than  just  a  database  system,  Cache  incor¬ 
porates  a  powerful  Web  application  development 


environment  that  dramatically  reduces  the  time  to 
build  and  modify  applications. 

The  reliability  of  Cache  is  proven  every  day  in 
“life -or- death”  applications  at  thousands  of  the  world’s 
largest  hospitals.  Cache  is  so  reliable,  it’s  the  leading 
database  in  healthcare  -  and  it  powers  enterprise  appli¬ 
cations  in  financial  services,  government  and  many 
other  sectors. 

We  are  InterSystems,  a  specialist  in  data  manage¬ 
ment  technology  for  twenty- five  years.  We  provide 
24x7  support  to  four  million  users  in  88  countries. 
Cache  is  available  for  Windows,  OpenVMS,  Linux  and 
major  UNIX  platforms  -  and  it  is  deployed  on  systems 
ranging  from  two  to  over  10,000  simultaneous  users. 


InterSystems  f 

£  CACHE 

Make  Applications  Faster 

Try  a  better  database.  For  Free. 

Download  a  free,  fully-functional,  non-expiring  version  of  Cache  or  request  it  on  CD  at  www.InterSvstems. com/robust 


C  2003  InterSystems  Corporation.  All  rights  reserved.  InterSystems  Cache  is  a  registered  trademark  of  InterSystems  Corporation.  7-03 


WebDAV 

Web-based  Distributed  Authoring  and 
Versioning  is  a  standardized  set  of  ex¬ 
tensions  to  HTTP  1.1  that  allows  users 
to  collaborate  over  the  Internet  by  editing  and  man¬ 
aging  files  remotely.  Page  34 


SECURITY  MANAGER'S  JOURNAL 

Rogue  Access  Point 
Leads  to  Embarrassment 

Mathias  Thurman  must  identify  the  location  of  a  rogue 
access  point  after  an  outside  vendor  discovers  its 
presence  and  gets  into  the  corporate  LAN.  Page  36 


QUOTE  OF  THE  WEEK 

MAs  microcomputers  acquired 

mainframe  power,  tens  of  millions 
of  amateurs  got  hold  of  the  capacity  to  mess 
up  systems  in  ways  that  previously  were 
available  only  to  professional  programmers.” 
-  From  Paul  A.  Strassmann's  column,  page  38 


Vendors  are  rushing  an  assortment  of  products  to  market  that  monitor  and 
enforce  compliance  with  privacy  regulations,  by  jaikumar  vi  jayan 


communication  of  unencrypted  patient  information,  such 
as  account  numbers,  medical  information  or  payment  his¬ 
tory,  is  automatically  flagged  and  stored  for  later  review 
and  action. 

Such  automated  capabilities  are  crucial  to  Community 
Health’s  ability  to  stay  on  top  of  its  HIPAA  obligations. 
“Without  a  product  like  this,  we  wouldn’t  have  been  able 
to  see  what  was  going  on  in  our  networks,”  McLain  says. 

Regulatory  Push 

VIEW  is  one  of  a  growing  number  of  products  that  are 
being  offered  up  as  automated  tools  for  monitoring  and 
auditing  privacy  compliance. 

Vendors  of  such  products  hope  to  tap  into  concerns 
about  liability  issues,  such  as  the  need  to  comply  with  a 
growing  number  of  privacy  regulations,  says  Pete  Lind- 
strom,  an  analyst  at  Spire  Security  LLC  in  Malvern,  Pa. 


As  THE  information  systems  security  manager 
at  Community  Health  Network  in  Indianapolis, 
a  major  part  of  David  McLain’s  job  is  to  ensure 
that  employees  are  adhering  to  the  require¬ 
ments  of  the  Health  Insurance  Portability  and  Account¬ 
ability  Act  (HIPAA). 

That  means  making  sure  that  protected  patient  health 
information  isn’t  transmitted  in  a  noncompliant  manner 
within  or  outside  of  the  hospital  system’s  networks. 

To  monitor,  audit  and  enforce  compliance,  McLain  uses 
an  automated  tool  called  VIEW  for  Privacy  Protection,  a 
content  monitoring  product  from  Vericept  Corp.  in  Engle¬ 
wood,  Colo.  VIEW,  which  stands  for  Vericept  Intelligent 
Early  Warning,  uses  hardware  devices  to  sniff  out  and 
document  e-mail,  instant  messages,  chat  sessions  and 
peer-to-peer  or  file-sharing  sessions  that  violate  privacy 
rules  on  Community  Health’s  networks.  For  instance,  all 
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Continued  from  page  25 

Some  of  the  privacy  regula-  p*|fjs§js§P 
tions  are  industry-specific,  such 
as  HIPAA’s  mandates  for  health  care  organizations 
and  the  Gramm-Leach-Bliley  Act’s  requirements  for 
financial  services  companies.  But  others  cut  across 
industries,  including  Europe’s  data  privacy  regula¬ 
tions  and  California’s  Security  Breach  Notification 
Act,  which  requires  companies  to  inform  customers 
of  security  breaches  that  compromise  some  types  of 
personal  data. 

“Privacy  is  no  longer  just  about  the  right  way  of 
doing  things;  it  is  also  the  legal  way  of  doing  things,” 
says  Michelle  Boggess,  electronic  data  security  coor¬ 
dinator  at  Baptist  Health  Care’s  compliance  office  in 
Pensacola,  Fla. 

Many  vendors  have  responded  with  compliance 
monitoring  and  enforcement  products.  “Everyone  in 
the  security  space  wants  to  take  some  credit  for  ad¬ 
dressing  privacy  issues,”  Lindstrom  says. 

It’s  important  to  remember,  however,  that  most 
of  the  tools  are  still  evolving  and  remain  largely 
untested  in  enterprise  environments,  says  Roger 
Brown,  an  IT  auditor  at  Jefferson  Health  System,  a 
$2  billion  health  care  organization  in  Radnor,  Pa.  Or¬ 
ganizations  need  to  first  have  good  processes  and 
policies  in  place  for  such  tools  to  be  effective,  he  says. 

But  implemented  properly,  such  automated  tools 
can  deliver  far  better  efficiencies  than  manual  com¬ 
pliance  checks,  which  are  “destined  for  failure,” 
Lindstrom  says. 

The  Pure  Plays 

Most  tools  fall  into  one  of  two  categories:  products 
developed  specifically  to  address  privacy  compli¬ 
ance;  and  repurposed  products,  such  as  spam-filter¬ 
ing  software,  that  now  focus  on  privacy  issues. 

Several  vendors  offer  tools  with  privacy  compli¬ 
ance  as  the  core  function. 

IBM’s  Tivoli  Privacy  Manager  for  e-business  tech¬ 
nology  is  one  example.  The  product,  which  works 
with  AIX,  Solaris  and  Windows  2000  systems,  is  de¬ 
signed  to  monitor  and  enforce  compliance  at  the 
transaction  and  application  levels,  says  product 
manager  Steve  Adler. 

A  company  can  use  Tivoli  Privacy  Manager  to 
convert  a  written  privacy  policy  into  digital  form 
and  use  those  policies  to  control  the  manner  in 
which  applications  and  users  access  sensitive  data. 
It  gives  companies  a  way  to  centrally  create,  edit, 
manage  and  audit  policies  that  dictate  which  sen¬ 
sitive  information  is  accessed,  by  whom  it  is  ac¬ 
cessed,  the  purpose  for  which  it  is  accessed,  and 
■how  it  is  shared,  stored  and  eventually  destroyed, 
Adler  says. 

Other  examples  of  privacy-specific  products  in¬ 
clude  WebXM  software  from  Watchfire  Corp.,  Vontu 
Protect  from  Vontu  Inc.  and  Liquid  Machines  from 
Liquid  Machines  Inc. 


Waltham,  Mass.-based  Watchfire  is  selling  its 
privacy  tool  as  a  component  of  a  wider  Web  site 
management  and  quality  assurance  tool.  WebXM 
can  be  used  to  scan  Web  sites  for  information  col¬ 
lection  practices,  links  to  privacy  policies,  user¬ 
tracking  practices  and  Web  page  security  practices 
that  affect  privacy. 

San  Francisco-based  Vontu’s  product,  meanwhile, 
is  targeted  at  insider  threats  and  allows  companies  to 
monitor  their  networks  for  transmission  of  confiden¬ 
tial  customer  or  employee  information,  says  Doug 
Camplejohn,  a  company  vice  president. 

Lexington,  Mass.-based  Liquid  Machine’s  product 
is  aimed  at  helping  companies  protect  sensitive  doc¬ 
uments  and  data  by  controlling  who  gets  access  as 
well  as  where,  when  and  how  access  is  granted,  ac¬ 
cording  to  CEO  Jim  Schoonmaker. 

The  Converts 

Ottawa-based  Coast  Software  Inc.  is  one  vendor  that 
has  repurposed  its  product  for  privacy 
compliance.  Coast’s  Web  Quality  Central 
software,  originally  developed  as  a  quali¬ 
ty  testing  tool  for  Web  sites,  is  now  mar¬ 
keted  as  a  tool  for  monitoring  privacy 
compliance. 

Go  Jobs  Inc.,  a  Newport  Beach,  Calif.- 
based  online  job-posting  site,  uses  Coast’s 
Web  Quality  Central  to  monitor  Web  site  content 
and  functions.  The  software  periodically  scans  Go 
Jobs’  50,000  Web  pages,  searching  for  privacy  issues 
such  as  pages  missing  a  P3P  privacy  policy,  pages 
with  links  containing  personal  information  and  pages 
with  potentially  dangerous  data  leaks. 

The  reports  generated  give  Go  Jobs  a  detailed 
overview  of  the  company’s  privacy  compliance,  as 
well  as  Web  site  accessibility  and  operational  securi¬ 
ty  standards,  says  Jonathan  Duarte,  president  of  the 
online  job  board. 

“Privacy  is  a  primary  concern  for  us,”  Duarte  says. 


With  about  7,000  visitors  to  the  site  daily,  any  com¬ 
promise  of  personal  information  “could  put  us  in  a 
world  of  financial  hurt.  Coast’s  software  is  our  insur¬ 
ance  policy,”  he  says. 

Likewise,  Alpharetta,  Ga.-based  CipherTrust  Inc.  is 
repositioning  its  IronMail  antispam  and  antivirus 
product  as  a  tool  for  controlling  the  use  of  encrypted 
e-mail  at  companies  in  industries  affected  by  HIPAA 
or  Gramm-Leach-Bliley. 

Baptist  Health  is  using  IronMail’s  policy  manager 
to  scan  each  incoming  and  outgoing  message  on  the 
hospital  system’s  networks  for  specific  words,  phras¬ 
es  or  attachments.  It  can  intercept  and  hold  any 
e-mail  containing  protected  patient  information. 
Administrators  can  then  let  the  message  pass 
through  to  the  recipient  or  block  it. 

“IronMail  has  helped  us  to  identify  users  in  the 
hospital  who  are  relaying  patient  information  to  peo¬ 
ple  outside  of  the  corporation  [without  adequate 
safeguards].  Before,  we  didn’t  have  a  way  to  grab  that 
information,”  says  Boggess. 

Vendors  of  content  protection  soft¬ 
ware  such  as  Waltham,  Mass.-based 
Authentica  Inc.,  Boston-based  Sealed- 
Media  Inc.,  and  Palo  Alto,  Calif. -based 
PSS  Systems  Inc.  are  also  rushing  privacy 
compliance  products  to  market,  says 
Joshua  Duhl,  an  analyst  at  Framingham, 
Mass.-based  IDC. 

Such  products  focus  on  postdelivery  protection  of 
documents  and  Web  content  via  encryption  and  the 
enforcement  of  policies  related  to  how  the  data  is  to 
be  accessed,  stored,  copied  or  printed. 

“Compliance  is  probably  the  best  opportunity  that 
these  vendors  have  had  to  provide  value  with  their 
products,”  Duhl  says.  “All  of  the  digital  rights  man¬ 
agement  vendors  have  some  sort  of  story  around 
compliance,  whether  it  be  the  fact  that  they  are  doing 
encryption  of  the  data  or  making  sure  there  is  no 
leakage  of  information.”  O  42105 


A  TOOL  FOR  EVERY  NEED 


Many  vendors  offer  privacy  compliance  tools, 
but  each  product  addresses  a  different  area  of 
compliance. 

WEB  WATCHERS 

These  products  let  administrators  scan  Web  pages  for  P3P 
privacy  policies,  cookies  and  Web  beacons  used  for  tracking 
users;  information  collection  practices;  and  links  to  other 
sites  that  could  compromise  privacy.  Watchfire  and  Coast 
Software,  for  instance,  aim  to  help  companies  monitor  Web 
site  content  and  activity  for  privacy  compliance. 

TRAFFIC  MONITORS 

Others  vendors,  such  as  Vericept  and  start-up  Vontu,  offer 
network  content  tracking  products.  Vericept’s  VIEW  for  Priva¬ 
cy  Protection,  for  instance,  uses  linguistic  and  mathematical 
analysis  to  scan  the  network  for  content  -  such  as  primary 
health  information  or  employee  data  -  that  doesn’t  comply 
with  an  organization’s  privacy  policies  or  security  boundaries, 
says  product  manager  Roger  Brown.  The  noncompiiant  data 
is  logged,  copied  and  reported.  Vontu’s  product  is  designed 


more  to  prevent  insider  abuse  and  looks  for  specific  pieces 
of  proprietary  information  leaving  the  organization  by  e-mail, 
FTP  or  chat  session,  says  Doug  Camplejohn,  a  company 
vice  president. 

CONTENT  CHECKERS 

Still  other  products  are  designed  to  protect  content.  Products 
from  vendors  such  as  Liquid  Machines  and  allow 

companies  to  enforce  privacy  policies  at  the  content  level. 
The  tools  enable  companies  to  allow  or  prevent  actions  such 
as  reading,  altering,  copying  and  printing  data  based  on  a 
user’s  privileges  for  that  document. 

TRANSACTION  TRACKING 

One  of  the  crucial  differentiators  in  IBM’s  Tivoli  Privacy 
Manager  technology  is  its  focus  on  real-time  privacy  enforce¬ 
ment.  The  middleware  product  uses  privacy  policies  to  con¬ 
trol  real-time  access  to  database  information  from  the  appli¬ 
cation  layer.  With  it,  companies  are  able  to  enforce  and  audit 
policies  related  to  how  and  when  critical  data  can  be  ac¬ 
cessed  and  used. 


PRODUCT  ROUNDUP 

Check  out  this  sampling 
of  vendors  offering  privacy 
compliance  monitoring  tools: 

OQuickLink  42102 
www.computerworld.com 
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Secure, 
Reliable, 
freedom  and 
Flexibility 


Introducing  a  new  era  of  secure,  corporate  business  freedom 
and  flexibility  —  Nokia  Mobile  Connectivity  solutions. 


Employees  throughout  an  enterprise  want  to  be 
more  mobile  and  productive  —  and  this  can  be 
realized  thanks  to  Nokia  Mobile  Connectivity  solutions. 
CIOs  and  IT  managers  can  provide  the  mobility  and 
security  of  anytime,  anywhere  access  to  users 
while  empowering  everyone  from  the  CEO  to  field 
salesforce  teams  with  the  information  needed  to  do 
their  work  where  and  when  they  choose.  Nokia 
Mobile  Connectivity  solutions  include  a  range  of  IPSec- 
and  SSL-based  client  arid  gateway  products  that 


IMOKIA 

Connecting  People 


provide  secure,  appropriate  access  to  corporate 
email  and  applications.  Enterprises  will  discover  new 
levels  of  efficiency  from  their  workforce,  whiie  f| 
giving  them  greater  freedom  to  manage  their  business  || 
and  personal  lives.  All  solutions  are  easy  to  deploy 
and  manage,  are  based  on  award-winning  technology 
and  are  backed  by  Global  Support  and  Services.  f  i 

So  if  you  want  greater  working  freedom  that’s  IT 
approved,  go  ahead  and  escape.  if 

Visitvwvw.nokia.com/mobileaccess/americas 
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HOW  CLOSE  ARE  YOU  TO  THE 
NEXT  GENERATION  OF  NETWORKING? 

THE  ANSWER  IS  JUST  BENEATH  THE  SURFACE 


Within  your  desktops,  notebooks,  switches  and  servers  are  chips  enabling  your  business  to  operate  in  real  time,  delivering  Gigabit 
speed  both  reliably  and  securely.  When  the  top  10  computer  and  networking  equipment  brands  need  unsurpassed  performance, 
they  turn  to  us.1  Broadcom®  chips  are  two  to  three  times  faster  than  the  closest  competitor’s  in  delivering  network  throughput  on 
your  demanding  applications.2  Whether  you’re  wired  or  wireless,  networking  hardware  built  with  Broadcom  technology  ensures 
the  devices  you  use  today— as  well  as  those  you  add  tomorrow— will  connect  easily  and  seamlessly  across  air,  fiber  and  copper. 


Learn  how  building  upon  Broadcom®  chips  end-to-end 
can  provide  you  with  faster  network  performance. 
Download  the  first  two  chapters  of  our  new  e-book 
“Architecting  Next-Generation  Networks"  now  at 

www.computerworld.gobroadcom.com/ebook. 
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ysia  benford’s  problem  was 
empty  trucks.  After  delivering 
animal  feed  to  farmers,  trucks 
from  her  company,  Associated 
British  Nutrition  and  Agri¬ 
products  Ltd.,  returned  with¬ 
out  a  load.  On  the  way  back, 
they  often  met  or  passed  other  trucks  picking  up 
products  the  same  farmers  were  selling  to  ABNA. 

The  fact  that  ABNA’s  customers  were  also  some¬ 
times  its  suppliers  created  an  opportunity  to  elimi¬ 
nate  some  of  those  2,000  daily  trips,  streamline  sup¬ 
ply  chain  operations  and  reduce  the  $100  million  an¬ 
nually  spent  on  logistics.  “If  you  can  minimize  empty 
running,  you  can  take  costs  out  —  that  was  one  of  the 
main  drivers  for  this,”  says  Benford,  group  informa¬ 
tion  systems  and  logistics  director  at  ABNA  in  Peter¬ 
borough,  England. 

The  challenge  was  how  to  integrate  a  logistics  op¬ 
timization  system  with  ABNA’s  customer,  account¬ 
ing,  trading  and  business  systems  (some  from  acqui¬ 
sitions),  running  under  Unix,  Hewlett-Packard  Co.’s 
OpenVMS  and  Microsoft  Corp.’s  Windows  NT.  Be¬ 
cause  users  liked  these  best-of-breed  applications, 
Benford  rejected  installing  a  monolithic  ERP  system. 

She  took  what  she  judged  to  be  a  simpler,  cheaper 
route:  a  bus  architecture  using  messaging  routers  to 
connect  those  major  systems  and  enable  them  to 
share  information  —  an  integration  technology  now 
called  the  enterprise  service  bus  (ESB).  “The  mes¬ 
saging  approach  seemed  to  be  the  best  solution  . . . 
and  it  didn’t  cost  a  fortune,”  says  Benford,  who 
worked  with  Sonic  Software  Corp.  on  the  ESB. 

ABNA  and  other  early  adopters  of  the  ESB  ap¬ 
proach,  such  as  General  American  Corp.  and  Central 
Hudson  Gas  &  Electric  Corp.,  are  seeking  the  follow¬ 
ing  benefits: 

■  Interoperability  —  the  ability  to  interconnect  ap¬ 
plications  and  systems  across  messaging  platforms 
and  operating  systems. 

■  Lower  costs:  What  in  the  past  might  have  been 
multimillion-dollar  integration  projects  can  cost 
one-fourth  to  one-third  as  much  as  they  once  did. 

■  Simpler  development  models  that  rely  on  stan¬ 
dards  and  are  suited  to  generalist  developers. 

®  Services-oriented  architecture,  which  can  har¬ 
ness  Web  services  capabilities. 

Turning  to  integration  to  streamline  operations 
and  save  money  is  nothing  new,  but  today’s  tightened 
IT  budgets  have  pushed  the  trend,  says  Steve  Craggs, 
a  consultant  at  Saint  Consulting  Ltd.  in  Hampshire, 
England,  who  is  vice  chairman  of  the  EAI  Industry 
Consortium  in  Calgary,  Alberta.  What’s  new  is  the 
messaging  technology  approach  and  its  ability  to  re¬ 
tain  80%  of  the  power  of  existing  enterprise  applica¬ 
tion  integration  (EAI)  system  and  add  increased  ca¬ 
pabilities  at  a  comparatively  low  cost. 

“What’s  really  tipped  the  ESB  is  the  emergence  of 
stronger  standards,  especially  for  XML,  JMS  and 
Web  services,”  says  Roy  Schulte,  an  analyst  at  Gart¬ 
ner  Inc.  in  Stamford,  Conn.,  and  the  originator  of  the 
ESB  designation.  Improvements  in  publish-and-sub- 
scribe  technology  and  middleware  as  well  as  faster 
networks  have  boosted  real-time  connectivity  across 
heterogeneous  environments,  but  it  has  taken  the 
ESB  approach  to  bring  together  what  Schulte  calls 
the  enterprise  nervous  system.”  He  predicts  that  “a 


Although  the  technology  is  still  being  developed,  some 
companies  are  already  using  an  enterprise  service  bus  to 
solve  problems  and  save  money  By  Connie  Winkler 


majority  of  large  enterprises  will  have  an  enterprise 
bus  running  by  2005.” 

“Companies  need  deeper  integration  beyond  Web 
services  and  XML,”  says  Eric  Newcomer,  chief  tech¬ 
nology  officer  at  Dublin-based  Iona  Technologies 
PLC,  which  is  moving  toward  an  ESB  model. 
“They’ve  built  up  different  middleware  using  COR- 
BA,  application  servers,  Microsoft  .Net  and  IBM 
products  such  as  [WebSphere  MQ]  —  but  none  of  it 
talks  to  the  other.” 

Other  organizations  are  using  ESBs  to  extend  inte¬ 
gration  to  other  departments  or  functions.  “Having 
mission-critical  applications  on  EAI  doesn’t  stop 
them  from  the  cheaper  ESB  approach,”  adds  Craggs. 

Generally  speaking,  an  ESB  is  a  modular  middle¬ 
ware  layer  passing  data  between  applications  and 
systems  via  a  bus  (or  ring)  architecture  that  has  a 


The  following  are  features  that  characterize 
enterprise  service  bus  architecture: 

Bus-related  messaging  engines  that 
provide  transformation,  XML  and 
intelligent  routing  services,  and  the 
communications  bus  itself 

Definition  tools  and  repository  services 

Administration  and  management 
services 

Support  for  standard  forms  of 
connectivity,  such  as  Web  services 

Adherence  to  industry  standards 

SOURCE.  STEVE  CRAGGS.  VICE  CHAIRMAN.  EAI  INDUSTRY  CONSORTIUM, 
"BEST  OF  BREED  ESBs” 


core  asynchronous  messaging  backbone  with  intelli¬ 
gent  transformation  and  routing  for  reliability.  This 
contrasts  with  the  traditional  hub-and-spokes  inte¬ 
gration  model  with  passive  nodes  and  intelligent 
hubs.  The  ESB  depends  upon  standards-based  tech¬ 
nologies  —  typically,  but  not  always,  Java  Message 
Service  (JMS),  Java  2  Enterprise  Edition  (J2EE)  con¬ 
nectors  and/or  XML  document  exchange  capability. 

Services  deployed  at  each  application  plug  into  the 
bus  via  standards-based  connections.  Applications 
can  be  activated  from  or  to  anywhere  on  the  bus, 
without  having  to  go  through  a  central  hub.  Despite 
the  reliance  on  standards,  however,  vendors  have 
chosen  different  messaging  approaches  and  features 
in  their  ESB  bundles.  To  simplify  ESB  projects,  ven¬ 
dors  have  added  development  consoles  or  dash¬ 
boards  using  Java  and  drag-and-drop  features. 

ESBs  are  the  “next-generation  middleware”  that 
will  deliver  the  same  level  of  integration  to  midsize 
companies  that  larger  companies  have  gotten  from 
application  servers  for  years,  says  Dennis  Byron,  an 
analyst  at  IDC  in  Framingham,  Mass.  “What  you’re 
seeing  is  the  natural  trend:  As  technology  becomes 
more  mature,  it  provides  the  same  capability  at  the 
lower  end  of  the  market  and  at  lower  price  points.” 

Several  ESB  suppliers  start  single-server  licenses 
at  $12,500  to  $25,000,  although  major  systems  cost 
about  $250,000,  plus  $150,000  for  customization.  Still, 
this  represents  a  fraction  of  the  cost  of  EAI  imple¬ 
mentations.  The  hang-up  with  EAI  isn’t  the  purchase 
price,  explains  Byron,  but  the  long  implementation 
times  needed  by  pricey  consultants.  “A  $50  million 
company  can’t  afford  $2  million  to  customize  and  im¬ 
plement  a  proprietary  solution,”  he  says. 

Nor  has  it  hurt  that  ESBs  can  be  implemented  as 
projects.  “Even  though  customers  envision  a  perva¬ 
sive  integration  network  across  their  enterprises,  the 
funding  model  today  is  project-based.  Customers 
buy  ESB  incrementally,”  says  Gordon  Van  Huizen, 
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How 
The  Bus 
Works 

An  ESB  provides  a  mes¬ 
saging  backbone  that 
extends  messaging- 
oriented  middleware 
(MOM)  functionality 
across  all  of  the  services, 
systems  and  applications 
that  a  company  uses. 


Enterprise 
service  bus 


MOM  facilities  ***.. 

i  Asynchronous,  message-based  communication  **•.. 
■  Publish/subscribe 

T ransf  ormation  services  . .  •  *  * 

Content-basedrouting  ..•** 


Web  service 
(Vendor  1) 


SOAP/HTTP 

T 

Web  service 
(Vendor  2) 


CTO  at  Sonic  Software,  a  Bedford,  Mass.-based  ESB 
vendor. 

Even  for  relatively  big  integration  efforts  at  large 
companies,  ESB  is  paying  off,  early  users  say.  For  ex¬ 
ample,  ABNA,  a  $1.95  billion  arm  of  $7.2  billion  Lon- 
don-based  Associated  British  Foods  PLC,  had  esti¬ 
mated  that  its  IT  integration  effort  could  cut  5%  to 
10%  off  a  $100  million  annual  shipping  bill;  the  proj¬ 
ect  has  cost  about  $2.8  million  for  development,  soft¬ 
ware  and  hardware.  “That’s  no-brainer  ROI,”  says 
Benford.  “We  are  proving  the  technology  will  work, 
and  we  are  starting  to  deliver  those  savings.” 

ESB  technology  has  also  given  ABNA  a  shipment 
status  notification  system  in  addition  to  electronic 
data  interchange,  and  that’s  important  because  im¬ 
proved  shipment  documentation  is  required  as  part 
of  the  U.K.’s  battle  against  mad  cow  disease. 

Development  Simplified 

Much  of  the  savings  on  ESB  projects  comes  from  the 
relative  simplicity  of  ESB  development  models  and 
tools.  “Because  we’re  standards-based,  you’re  writing 
code  to  a  standard  and  at  the  business  level,”  says 
Ronan  Bradley,  CEO  of  Dublin-based  PolarLake  Ltd., 
which  sells  the  JIntegrator  ESB.  “We  hide  all  that 
[complexity]  within  the  platform.” 

And  since  development  is  simpler,  fewer  program¬ 
mers  are  needed  —  and  they  can  also  be  skilled  in 
Java  or  XML  instead  of  being  specialists  in  propri¬ 
etary  products.  “It  needs  a  few  people  who  are  highly 
skilled,  but  not  an  army  of  them  —  we’re  seeing  [de¬ 
velopment]  teams  that  are  smaller,”  says  Steve  Field, 
practice  director  of  enterprise  integration  at  Tierl  In¬ 
novation  LLC,  a  systems  integrator  in  Denver. 

In  was  development  hassles  that  led  General 
American  Corp.,  which  provides  appraisal  and  title 
services  for  the  real  estate  industry,  to  consider  ESB 
technology.  Whenever  one  of  its  thousands  of  mort¬ 
gage  bank  customers  requested  an  electronic  link-in, 
Pittsburgh-based  GAC  had  to  shut  down  its  systems, 
which  run  a  Sybase  database  and  Windows  2000. 

“We’d  go  through  this  entire  project  of  mapping 
data  fields  back  and  forth,  testing,  and  actually  shut 
down  just  so  we  could  update  our  systems  to  support 
this  new  interface,”  says  Chris  Behning,  senior  vice 
president  and  CTO  at  GAC. 

Last  month,  GAC  went  live  with  Tifosi  Enterprise 
Integrator  from  Fiorano  Software  Inc.  in  Los  Gatos, 
Calif.  After  reviewing  integration  products  from 
IBM,  Sybase  Inc.  and  others,  GAC  decided  it  liked 


Tifosi’s  simplified  development  model  and  dash¬ 
board  for  designing  and  deploying  the  application. 
GAC  tried  a  proof-of-concept  model  before  installing 
the  $250,000  Tifosi  system  companywide.  Behning 
also  likes  the  ESB’s  Web  services  capability  because 
GAC  can  use  it  to  set  up  a  standard  way  for  cus¬ 
tomers  to  do  their  own  link-ins  in  the  future. 

Any  ESB  discussion  quickly  turns  to  Web  services. 
“ESBs  will  be  the  primary  implementations  of  Web 
services.  ESBs  are  how  you  are  going  to  get  Web  ser¬ 
vices,  vs.  competing  with  Web  services,”  Schulte  says. 

And  the  ESB  marketplace  will  get  busier.  “With 
IBM  and  Microsoft  preparing  to  offer  ESBs,  this  con¬ 
cept  will  take  off  quickly,”  says  Schulte,  referring  to 
Microsoft  Corp.’s  rumored  Indigo  product  and  IBM’s 
plans  to  offer  an  ESB  next  year  [QuickLink  42341]. 

IBM  executives  suggest  that  their  services  bus  will 
be  a  variation  of  the  existing  WebSphere  MQ mes¬ 
saging  platform.  Interest  in  the  ESB  has  also  spawned 
a  large  handful  of  suppliers  and  has  existing  pro¬ 
viders  announcing  new  or  recast  products. 

When  Central  Hudson  Gas  &  Electric  needed  ESB- 
style  integration,  it  chose  to  work  with  its  vendor  of 
20  years,  Software  AG  Inc.  in  Reston,  Va.  The  Pough¬ 
keepsie,  N.Y. -based  utility  needed  an  Internet  cus¬ 
tomer  billing  and  information  system  and  a  way  to 
better  feed  outage  reports  into  a  new  storm  manage¬ 
ment  system  from  GE  Power  Systems  in  Schenec¬ 
tady,  N.Y.  “Our  goal  was  to  improve  customer  service 


by  providing  self-service  over  the  Internet  and 
through  an  outage  management  system  that  predicts 
the  cause  of  power  outages  reported  by  customers,” 
says  Central  Hudson  IT  manager  Gary  Wright. 

For  Central  Hudson,  each  customer  call  offloaded 
to  the  Internet  saves  $6  to  $7.  “Of  the  720,000  calls 
received  per  year,  we  estimate  10%  can  be  answered 
online  for  a  potential  savings  of  $500,00  a  year  or 
more,”  Wright  says.  “We’re  not  looking  to  reduce 
staff;  our  goal  is  to  reduce  costs  so  we  can  manage 
growth  without  increasing  resources.” 

Although  Wright  considered  other  integration  op¬ 
tions,  Software  AG’s  EntireX  has  the  messaging  com¬ 
munications,  and  its  Tamino  product  has  the  XML 
server  capability  to  connect  Web  documents.  Soft¬ 
ware  AG  has  long  had  adaptable  messaging  and  inte¬ 
gration,  but  now  its  technology  matches  the  ESB 
buzzword,  says  Joe  Gentry,  the  vendor’s  senior  direc¬ 
tor  of  product  marketing. 

Customers  don’t  call  to  buy  an  ESB:  “They  call  and 
describe  a  challenge  —  to  send  information  from 
multiple  back-end  systems  to  business  partners,  or 
they  want  to  provide  a  Web  interface  combining  data 
from  multiple  sources  or  that  enables  customers  to 
manage  their  accounts,”  Gentry  says.  “Right  now, 
that’s  called  an  ESB.”  ©  42253 


Winkler  is  a  freelance  writer  in  Seattle.  She  can  be 
reached  at  winklerconnie@yahoo.com. 
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Sonic  XQ  ESB  from  Sonic  Software,  Bedford,  Mass. 
Tifosi  ESB  from  Fiorano  Software,  Los  Gatos.  Calif. 
JIntegrator  from  PolarLake,  Dublin 
SpiritWave  from  SpiritSoft  Ltd.,  Milford.  Mass. 
Artix  from  Iona  Technologies,  Dublin 
WASP  suite  from  Systinet  Corp.,  Cambridge,  Mass. 
DE  Management  Server  from  Digital  Evolution 
Inc.,  Santa  Monica,  Calif. 


Composite  Application  Suite  from  Kenamea  Inc., 

San  Francisco 

EntireX  from  Software  AG,  Reston,  Va. 

KnowNow  Internet  Middleware  from  KnowNow 
Inc.,  Sunnyvale,  Calif. 
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Enterprise  Messaging  from  Tibco  Software  Inc;, 

Palo  Alto,  Calf. 
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vork  Director  from  Blue  Titan  Software  Inc., 

Francisco 

e  Clear  4  from  Cape  Clear  Software  Inc.,  >  f 
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IBM  has  said  it  will  offer  bus  technology  by  h 
probably  as  an  update  to  its  WebSphere  MQ  . . 
platform  for  a  Servfce- oFtehtdd.'ardhwiSWiK^OT1 
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Microsoft  is  alsb  expected  by  analysts  to  offer  E 
functionality  in  its  Web  services  framework  code 
Indigo. 
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Products  and 
Vendors 


For  a  technology  that  touts 
standards,  the  ESB  offerings 
from  a  variety  of  vendors  are  far 
from  standard.  Gartner  analyst 
Roy  Schulte  and  other  industry 
watchers  generally  break  suppli¬ 
ers  into  three  groups  -  in  addition 
to  existing  players,  which  include 
EAI  suite  makers. 


Can  you  see  it? 


Middleware  is  Everywhere 
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MIDDLEWARE  makes  the  on  demand  world  on  demand. 
And  middleware  is  powerful  IBM  software  like  Tivoli?  DB2®  and 
WebSphere®  Open,  behind-the-glass  technology  that  can 
automate  it  all  -  IBM,  Microsoft?  Oracle.  Problems  are  foreseen 
and  solved  before  they  occur.  IT  resources  are  directed  to 
core  business  needs.  Costs  are  reduced.  It's  automation. 
On  demand.  And  it  makes  your  customers  happy.  Very  happy, 
(©business  on  demand™  Go  to  ibm.com/software/automate 


1.  Automatic  overview  of  operation 

2.  Automatic  shipping  of  sale. 

3.  Automatic  identity  verification. 

4.  Automatic  updating  of  inventory. 

5.  Automatic  tracking  of  delivery. 
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BY  RUSSELL  KAY 

AS  MORE  AND  MORE 

enterprises  use  project 
teams  with  members 
based  in  different  loca¬ 
tions  and  time  zones  —  often 
in  different  countries  or  hemi¬ 
spheres  —  their  need  for  ef¬ 
fective  electronic  collabora¬ 
tion  tools  has  grown  dramati¬ 
cally.  There  are  a  number  of 
products  that  aim  to  solve  that 
problem,  and  most  make  at 
least  some  use  of  a  single  un¬ 
derlying  technology. 

Web-based  Distributed  Au¬ 
thoring  and  Versioning  (Web- 
DAV  or,  more  often,  just  plain 
DAV)  is  a  standard  that  ex¬ 
tends  the  capabilities  of 
HTTP  1.1,  the  underpinning  of 
the  World  Wide  Web. 

HTTP  lets  users  read  con¬ 
tent  that  has  already  been 
published  on  the  Web,  but  it 
provides  no  simple  way  for 
users  to  post  new  content  or 
edit  existing  Web  documents. 

The  protocol  has  no  stan¬ 
dard  method  for  moving  a  file, 
locking  or  unlocking  it,  or 
adding  property  information 
to  the  file.  WebDAV  standard¬ 
izes  all  of  those  functions, 
making  the  Web  writable  as 
well  as  readable  in  an  inter¬ 
operable  way. 

WebDAV  was  first  proposed 
in  1996,  and  the  current  stan¬ 
dard,  RFC  2518,  was  published 
by  the  Internet  Engineering 
Task  Force  (IETF)  in  February 
1999.  Versioning  extensions  to 
WebDAV  were  codified  in 
RFC  3523  in  March  2002. 


Diving  into  DAV 

WebDAV  extends  HTTP  by 
adding  new  functions,  includ¬ 
ing  the  following: 

H  Delete:  for  deleting  a  docu¬ 
ment  or  other  resource. 

■  PropFind  and  PropPatch:  for 
reading  and  writing  metadata 
(also  called  properties)  for  a 
resource. 

■  MkCol:  for  creating  a  new 
DAV  collection  (think  of  fold¬ 
ers  for  organizing  files). 

■  Copy  and  Move:  for  copying 
or  moving  a  resource. 

a  Lock  and  UnLock:  for  pro¬ 
tecting  editing  changes  when 
multiple  users  access  the  same 
document. 

b  CheckOut  and  Checkin:  for 

enabling  version  control  and 


WebDAV 


revision  tracking. 

HTTP  headers  aren’t  long 
enough  to  handle  some  re¬ 
quests,  so  WebDAV 
uses  XML  to  format 
such  requests  and  to 
store  all  resource 
properties.  WebDAV 
version  control  also 
makes  it  possible  for 
users  to  know  which  version 
of  a  file  is  the  most  current. 

WebDAV  at  Work 

Let’s  say  you’re  collaborating 
on  an  engineering  project 
with  two  or  more  groups  in 
distant  locations.  You  proba¬ 
bly  use  e-mail  to  communicate 
with  one  another  about  the 
project’s  status,  and  you  send 
document  revisions  back  and 
forth,  with  everyone  hanging 
onto  copies. 

If  you’re  lucky,  your  organi¬ 
zation  has  a  document  man¬ 
agement  or  collaboration  sys¬ 
tem  to  help  keep  things  orga¬ 
nized,  as  well  as  a  version- 
control  system  to  help  track 
changes.  But  what  if  you  don’t 
have  those  resources? 

With  WebDAV-compliant 
software,  team  members  can 
edit  Web  documents  stored  on 
a  common  Web  server  that’s 
accessible  on  your  network 
and  over  the  Internet  (safe¬ 
guarded  as  needed  by  fire¬ 
walls  and  virtual  private  net¬ 
works)  from  any  member’s 
browser  or  other  software. 

A  file-locking  mechanism 
prevents  one  person  from  ac¬ 
cidentally  overwriting  anoth¬ 


er’s  changes  when  they  are 
working  on  the  document  at 
the  same  time.  And  you  can 
limit  access  rights, 
store  versions  for  later 
retrieval  and  maintain 
metadata  such  as  au¬ 
thorship  and  modifica¬ 
tion  dates. 

San-Francisco-based 
Xythos  Software  Inc.  has  a 
content-management  product, 
WebFile  Server  (WFS),  that 
combines  WebDAV  and  Se¬ 
cure  Sockets  Layer  encryption 
to  allow  controlled  remote  ac¬ 
cess  to  unstructured  docu¬ 
ments.  This  has  been  used  by 
a  number  of  health  care 


providers  in  meeting  the  re¬ 
quirements  of  the  Health  In¬ 
surance  Portability  and  Ac¬ 
countability  Act. 

Users  can  access  documents 
via  WFS,  which  enforces  per¬ 
missions  and  provides  secure 
remote  access.  WFS  can  also 
track  all  views  and  changes  to 
a  specific  document  and  inte¬ 
grates  into  many  desktop  ap¬ 
plications,  including  Microsoft 
Corp.’s  Office. 

Interoperability 

WebDAV  has  been  making 
strong  inroads  into  Web  infra¬ 
structure  products. 

The  two  leading  Web 
servers  —  Apache  and  Micro¬ 
soft  Internet  Information 
Server  —  are  compliant,  as  are 
document  and  content  man¬ 
agement  systems  from  Docu- 
mentum  Inc.,  Vignette  Corp. 
and  BroadVision  Inc. 

Other  popular  software 
tools  that  support  DAV  in¬ 
clude  Microsoft’s  Office  XP, 
Office  2003  and  SharePoint 
Portal  Server,  as  well  as 
Macromedia  Inc.’s  Dream¬ 
weaver,  and  Adobe  Systems 
Inc.’s  GoLive  and  Acrobat. 

WebDAV  functionality  is 
embedded  in  operating  sys¬ 
tems  including  Windows 
(from  Windows  95  onward), 
Apple  Computer  Inc.’s  Mac 
OS  X  and  Novell  Inc.’s  Net¬ 
ware.  Windows  XP’s  integrat¬ 


ed  support  enables  any  appli¬ 
cation  running  on  it  to  be 
WebDAV-enabled. 

DAV’s  Future 

In  many  organizations,  static 
documents  have  evolved  into 
active  documents  and  interac¬ 
tive  forms  over  corporate  net¬ 
works.  With  WebDAV  support 
widely  available,  Web  author¬ 
ing  is  also  likely  to  expand 
from  local  Web  servers  and  in¬ 
tranets  to  encompass  the  en¬ 
tire  Web,  simply  because  new 
software  will  support  seam¬ 
less  collaborative  authoring. 

The  DAV  Searching  and  Lo¬ 
cating  (DASL)  group,  which  is 
related  to  the  IETF,  is  working 
to  develop  a  way  to  search  a 
WebDAV-compliant  reposito¬ 
ry  on  any  platform.  The  DASL 
technology’s  main  function 
will  be  the  ability  to  search  for 
Web  resources  based  on  their 
properties  and  text  content. 
Another  working  group  is  ad¬ 
dressing  the  issue  of  access 
control.  ©  42130 


Kay  is  a  Computerworld  con¬ 
tributing  writer  in  Worcester, 
Mass.  You  can  reach  him  at 
russkay@charter.net. 

Are  there  technologies  or  issues  you’d  like 
to  learn  about  in  QuickStudy?  Send  your 
ideas  to  quickstudy@computerworld.com 

To  find  a  complete  archive  of  our 
QuickStudies,  go  online  to 

O  computerworld.com/quickstudies 


1)  User  accesses  WebDAV 
file  through  an  application, 
Web  browser  or  file- 
management  utility. 

2)  The  file  can  be  accessed 
over  any  type  of  network 
connection  -  LAN,  WAN 
dial-up,  VPN  or  wireless 
LAN,  for  example. 

3)  Security  is  achieved 
using  Secure  Sockets 
Layer  or  VPN  encryption. 

4)  Servers  enforce  per¬ 
missions  and  respond  to 
requests  to,  for  example, 
open  and  edit  files,  browse 
the  directory  or  create, 
rename,  delete  or  copy 
files. 

5)  Multiple  users  can  ac¬ 
cess  and  edit  the  same  file 
securely  and  concurrently. 


WebDAV  in  Use 


Some  applications 
that  suport  it: 

■  Microsoft  Excel 

■  Microsoft  Word 

■  Microsoft  Explorer 

■  Netscape 

■  Adobe  Acrobat 
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SOURCE  ADAPTED  FROM  XYTHOS  SOFTWARE  INC. 
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Can  you  see  it? 


Middleware  is  Everywhere 


M  I D  D LE  WAR E  is  what  on  demand 
business  demands.  And  middleware  is 
software  like  IBM  WebSphere.®  Using  an  open  and  scalable 
foundation,  WebSphere  lets  you  swiftly  respond  to  change. 
Applications  are  easily  updated,  tested  and  deployed. 
Lead  time  is  shortened.  And  everything  clicks,  regardless  of 
platform.  WebSphere  delivers  it  all.  On  the  money.  On  demand. 
(© business  on  demancTat  ibm.com/websphere/middleware 


1.  New  design  already  tested. 

2.  Suppliers  already  linked. 

3.  Procurement  already  automated 

4.  Blueprints  already  updated. 

5.  Engine  all  ready  for  takeoff. 


WebSphere 
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iogue  Access  Point 
Leads  to  Embarrassment 


An  unauthorized  and  undetected  wireless 
access  point  lets  a  visitor  into  the  corporate 
LAN.  By  Mathias  Thurman 


My  company  is  now 
down  one  employee. 
The  person  I  wrote 
about  last  time 
[QuickLink  41938],  who  au¬ 
thorities  suspected  was  using 
his  workstation  to  trade  child 
pornography,  was  escorted 
from  the  premises  last  week. 

Since  receiving  the  search 
warrant  that  led  to  his  dis¬ 
missal,  I  haven’t  heard  any¬ 
thing  from  the  inves¬ 
tigators,  but  I’m  sure 
the  guy  is  in  big  trou¬ 
ble.  We  had  a  chance 
to  analyze  the  image 
of  his  hard  drive,  and 
there  were  extensive 
directories  with  dif¬ 
ferent  categories  of  porn.  Not 
that  you’d  notice  unless  you 
opened  the  files:  He  had  saved 
almost  all  of  the  images  with 
innocuous-sounding  file 
names.  I’m  sure  this  was  done 
to  bypass  our  filters,  which 
detect  files  that  have  words  re¬ 
lated  to  pornography.  I  don’t 
think  my  company  will  suffer 
any  loss  as  a  result  of  this  guy’s 
departure,  as  he  seems  to  have 
spent  most  of  his  time  at  work 
on  his  illicit  collection. 

Surprise  Guest 

This  week  I  received  a  mes¬ 
sage  from  a  friend  of  mine  who 
works  for  a  vendor  my  compa¬ 
ny  uses.  He  suggested  that  my 
security  team  and  I  review  our 
wireless  policy,  because  he 
was  able  to  connect  to  our 
corporate  intranet  via  an  open 
wireless  access  point  while 
visiting  another  department 
recently.  This  was  both  sur¬ 
prising  and  embarrassing, 
since  we  have  established  a 
policy  on  wireless  LAN  use 
and  thought  we  had  rooted  out 
problem  devices  months  ago. 


I  called  my  friend,  and  he 
said  he  had  been  visiting  one  of 
our  software  development  cen¬ 
ters  to  give  a  demonstration  of 
his  company’s  debugging  soft¬ 
ware  when  he  noticed  a  prob¬ 
lem.  During  the  presentation, 
his  personal  firewall  started 
popping  up  messages,  asking 
for  permission  to  allow  con¬ 
nections  to  the  Internet. 

But  he  wasn’t  physically  at¬ 
tached  to  the  net¬ 
work  and  was  in  the 
middle  of  giving  a 
PowerPoint  presen¬ 
tation.  After  the 
meeting,  he  did 
some  checking  and 
noticed  that  his  lap¬ 
top’s  integrated  WLAN 
adapter  had  automatically 
connected  to  an  access  point 
in  our  facility.  The  Service  Set 
Identifier  code  on  that  access 
point  was  set  to  the  default 
name  “default”  with  no  en¬ 
cryption  enabled,  so  he  had 
unfettered  access  to  our  cor¬ 
porate  intranet. 

My  team  and  I  try  to  be 
proactive  in  monitoring  for 
these  problems.  We  use  the 
AirWave  Management  Plat¬ 
form  from  AirWave  Wireless 
Inc.  in  San  Mateo,  Calif.,  in 
combination  with  access 
points  from  3e  Technologies 
International  Inc.  in  Rockville, 
Md.,  to  scan  for  rogue  devices. 
But  we  use  it  only  at  our  cor¬ 
porate  headquarters.  We  don’t 
have  the  budget  to  purchase 
this  infrastructure  for  remote 
offices  such  as  the  software 
development  center. 

I  called  the  IT  manager  at 
the  software  development 
center,  shared  the  story  from 
my  friend  and  asked  him  if  he 
knew  of  any  authorized  wire¬ 
less  access  points  there.  The 


manager  said  he  installed  two 
access  points  about  a  year  ago 
but  said  he  had  removed  them 
when  our  WLAN  policy  came 
out  several  months  ago.  None¬ 
theless,  he  agreed  to  walk 
around  his  facility  to  search 
for  the  rogue  access  point. 

The  manager’s  search 
turned  up  nothing,  so  I  packed 
up  our  AirMagnet  Handheld, 
which  we  bought  from  Moun¬ 
tain  View,  Calif. -based  Air- 
Magnet  Inc.,  and  sent  it  to  him 
by  courier.  Two  days  later,  I 
walked  him  through  operating 
the  device.  He  immediately 
picked  up  a  single  wireless 
signal  and  tried  to  locate  the 
access  point  using  the  signal 
strength  meter.  However,  be¬ 
cause  of  the  construction  of 
the  building,  he  was  unable  to 
pinpoint  the  device’s  location. 

Backtracking 

The  next  step  was  to  try  to 
locate  the  access  point  via  the 
Media  Access  Control  (MAC) 
address  on  the  switch  to  which 
it  was  connected.  Every  net¬ 
work  interface  card  (wireless 
or  not)  has  a  unique  hardware 
address.  The  first  three  octets 
identify  the  vendor,  and  the  re¬ 
maining  characters  provide  an 
ID  number.  Since  the  access 
point  was  “open,”  meaning  no 
encryption  or  other  access 
control  was  enabled,  the  man¬ 
ager  could  use  the  AirMagnet 
device  to  associate  to  the  ac¬ 
cess  point.  And  since  I  already 
knew  the  MAC  address  of  the 
wireless  PC  Card  installed  in 
the  Compaq  iPaq  that  runs  the 
AirMagnet  software,  we  could 
trace  that  back  through  our 
network  infrastructure. 

I  called  the  network  engi¬ 
neer  responsible  for  the 
switch  at  the  development 
site,  gave  him  the  iPaq’s  MAC 
address  and  asked  him  to  con¬ 
duct  a  search  of  the  switch 
ports.  A  few  hours  later,  he 
called  back  with  the  informa¬ 


tion:  Cat  Switch  02,  Blade  4, 
Port  8.  The  network  engineer 
then  gave  me  another  MAC 
address  —  the  one  for  the 
wireless  access  point.  The  ac¬ 
cess  point  acts  as  the  hub  for 
wireless  devices,  so  both  the 
access  point  and  the  device 
share  the  same  switch  port. 

The  IT  manager  at  the  site 
then  had  the  facilities  manager 
trace  the  Ethernet  connection 
from  the  switch  port  to  the 
patch  panel.  Then,  using  a 
map,  he  determined  the  exact 
location  of  the  suspected  wall 
jack.  It  was  in  a  cubicle  be¬ 
longing  to  one  of  the  software 
engineers.  The  offending  de¬ 
vice  was  a  Linksys  access  point 
that  the  engineer  had  pur¬ 
chased  for  $79  at  Wal-Mart. 

The  user  hadn’t  seen  our 
wireless  policy  and  didn’t 
know  about  security  configu¬ 
rations  or  the  ramifications  of 
installing  an  unauthorized, 
misconfigured  access  point. 

He  had  simply  installed  the 
device  as  a  convenience.  The 
facilities  manager  removed 
the  access  point  and  gave  the 
engineer  a  copy  of  our  policy. 
Other  than  mentioning  the 
incident  to  his  supervisor, 
there  was  nothing  else  to  do. 

One  lesson  I  learned  is  that 
after  we  issue  a  security  poli¬ 
cy,  we  should  follow  up  with 
regular  reminders.  We’ll  also 
make  some  changes  to  our 
employee  orientation  program 
to  include  a  short  discussion 
on  current  security  policies 
(especially  wireless)  and  to 
reiterate  existing  policies  and 
acceptable-use  guidelines.  I 

WHAT  DO  YOU  THINK? 

This  week’s  journal  is  written  by  a  real  securi¬ 
ty  manager,  “Mathias  Thurman,”  whose 
name  and  employer  have  been  disguised  for 
obvious  reasons.  Contact  him  at  mathias_ 
thurman@yahoo.com,  or  join  the  discussion 
in  our  forum.  QuickLink  a1590 

To  find  a  complete  archive  of  our 
Security  Manager’s  Journals,  go  online  to 

O  computerworld.com/secjournal 
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Stealing 

Network 


Security  Bookshelf 

Stealing  the  Network:  Howto 
Own  the  Box,  by  Ryan  Russell, 
(ed.),  Ido  Dubrawsky; 
Syngress,  2003. 

Unlike  most  of  the 
security-related 
books  I  read,  this 
book  is  fiction.  It's  a 
series  of  stories,  each 
of  which  is  about  30 
pages,  that  take  the 
point  of  view  of  a  hacker  as  he 
sizes  up  and  hacks  into  differ¬ 
ent  infrastructures.  Although 
the  scenarios  are  fictitious, 
the  techniques  used  are  real. 
The  hacking  tools  and  meth¬ 
ods  discussed  cover  every¬ 
thing  from  routers  to  sniffing 
the  traffic  from  BlackBerry 
devices.  The  authors  offer  an 
interesting  perspective.  Plus, 
the  book  is  a  fun  read. 

-Mathias  Thurman 


Reactivity  Offers 
XML  Firewalls 

Reactivity  Inc.  last  week  intro¬ 
duced  a  family  of  security  ap¬ 
pliances  designed  to  secure 
Web  services  applications. 

The  Belmont,  Calif.-based 
security  vendor’s  new  XML 
Firewall  2300  series  is  aimed 
at  helping  companies  avoid 
threats  such  as  XML  denial- 
of-service  attacks,  said  the 
company.  Pricing  for  the  fire¬ 
walls  starts  at  about  $50,000. 


Symantec  Updates 
ESM  Security  Tool 

Symantec  Corp.  last  week  an¬ 
nounced  Enterprise  Security 
Manager  (ESM)  6.0,  the  latest 
edition  of  the  Cupertino,  Calif.- 
based  company’s  vulnerability 
assessment  and  policy  com¬ 
pliance  tool.  The  upgrade  is 
designed  to  help  IT  adminis¬ 
trators  compare  their  net¬ 
works’  security  against  indus¬ 
try  benchmarks,  Symantec 
said.  ESM  6.0  is  available 
now.  ESM  Manager  software 
sells  for  $2,394.  ESM  agent 
software  is  priced  from  $114 
for  an  agent  that  runs  on  Win¬ 
dows  or  Unix  workstations  to 
$1,995  for  an  agent  that  runs 
on  iSeries  servers. 
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Middleware  is  Everywhere 


Can  you  see  it? 


MIDDLEWARE  unifies  the  on  demand  world.  g"PIP8| 
On  demand.  And  middleware  is  software  like  IBM  Ma&i&M 
DB2  Content  Manager.  A  complete  and  open  solution  that 
easily  manages  and  leverages  information  from  almost 
anywhere.  Even  content  like  video  and  scanned  images 
is  easily  and  securely  accessed.  It’s  how  responsiveness 
increases,  productivity  soars  and  knowledge  becomes  power, 
(©business  on  demand™  Go  to  ibm.com/db2/middleware 


1.  Verifies  insurance  on  the  spot. 

2.  Files  digital  claim  in  an  instant. 

3.  Approves  estimate  at  the  site. 

4.  Orders  new  bumper  at  the  scene 

5.  Receives  settlement  in  a  snap. 
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New  Apps  Assess 
Compliance  Risks 

Providus  Software  Solutions  Inc. 
has  introduced  new  versions  of 
its  two  risk  management  applica¬ 
tions  for  Sarbanes-Oxley  and 
Basel  II  regulatory  compliance. 
The  products  provide  financial  in¬ 
stitutions  with  a  top-down  view 
of  potential  risks  across  lines  of 
businesses,  according  to  Nashua, 
N.H.-based  Providus.The  Risk- 
Resolve  3.0  applications  are  built 
on  Microsoft’s  .Net  Framework 
for  Web  services  and  provide 
users  with  workflow  and  permis¬ 
sion  capabilities  for  entering, 
viewing,  tracking  and  reporting 
on  risks  and  risk-related  data. 
Pricing  ranges  from  $50,000  to 
more  than  $300,000. 


Suite  Monitors  Web 
App  Performance 

Visualware  Inc.  in  Turlock,  Calif., 
last  week  introduced  Desktop 
Management  Suite,  a  set  of  four 
applications  to  track  and  manage 
Internet  application  performance. 
The  components  are  designed  to 
measure  the  time  it  takes  a  Web 
page  to  be  received  by  a  user;  as¬ 
sist  help  desk  staffers  in  spotting 
problems  between  a  server  and  a 
customer  desktop;  help  tech  sup¬ 
port  workers  check  a  customer’s 
desktop  configuration;  and  mea¬ 
sure  and  report  on  the  status  of 
services  from  an  application  serv¬ 
er  to  a  customer  location.  Pricing 
starts  at  $28,450. 


Cray’s  Red  Storm 
To  Go  Commercial 

Cray  Inc.  next  year  plans  to  re¬ 
lease  a  commercial  system  based 
on  its  Red  Storm  supercomputer 
at  the  Sandia  National  Labora¬ 
tory  in  Albuquerque.  The  10,000- 
processor,  Linux-based  system  - 
which  costs  approximately 
$90  million  -  is  capable  of  oper¬ 
ating  at  40  trillion  calculations 
per  second.  Seattle-based  Cray 
also  said  last  week  that  it  will 
use  the  Opteron  chip  from  Ad¬ 
vanced  Micro  Devices  Inc.  for 
the  commercial  version. 


PAUL  A.  STRASSMANN 


CIOs  Share  the  Blame  ' 


A  LIVELY  DEBATE  has  been  generated  by 
the  recent  report  “Cyberinsecurity:  The 
Cost  of  Monopoly,”  produced  by,  among 
other  credible  security  experts,  Daniel 
Geer,  Charles  P.  Pfleeger  and  Bruce 
Schneier.  The  vulnerability  of  any  monoculture  —  the 
central  theme  of  the  report  —  was  noted  here  five 
years  ago  [“Microsoft  a  U.S.  Security  Threat,”  Nov.  30, 
1998,  QuickLink  a3770]. 


While  the  paper  makes 
the  case  for  Microsoft’s  cul¬ 
pability  in  magnifying  secu¬ 
rity  risks,  that’s  only  a  par¬ 
tial  explanation  of  the  situ¬ 
ation  we’re  in.  Something 
must  be  said  about  the  con¬ 
duct  of  IT  managers  who 
have  ignored  rising  security 
threats. 

As  microcomputers  ac¬ 
quired  mainframe  power, 
tens  of  millions  of  amateurs 
got  hold  of  the  capacity  to 
mess  up  systems  in  ways 
that  previously  were  avail¬ 
able  only  to  professional  program¬ 
mers.  As  a  result,  security  has  now 
become  the  main  inhibitor  to  further 
computerization.  IT  management 
should  shoulder  part  of  the  blame  for 
several  reasons: 

1.  Abdication.  When  desktops  first 
showed  up,  CIOs  were  pleased  that 
they  could  unload  the  burden  of  satis¬ 
fying  rising  demands  to  enthusiastic 
amateurs  whose  costs  could  then  van¬ 
ish  into  administrative  expenses.  Com¬ 
plaints  about  a  lack  of  service  could  be 
unloaded  to  where  they  couldn’t  re¬ 
flect  on  the  CIOs’  difficulties  in  deal¬ 
ing  with  technological  innovation. 

For  example,  when  the  U.S.  Navy  and 
Marine  Corps  set  out  to  harness  un¬ 
controlled  desktops,  they  found  over 
100,000  “legacy”  applications  instead 
of  the  2,000  they  expected  to  find. 
Seizing  control  is  now  difficult  be¬ 
cause  most  of  the  useful  work  is  done 
on  local  applications  and  not  through 
services  provided  by  the  Navy/Marine 
Corps  CIO. 

2.  Absenteeism.  When  computing  de¬ 


vices  started  connecting 
to  the  Internet,  CIOs  toler¬ 
ated  the  widespread  prac¬ 
tice  of  jump-starting  local 
application  services  with 
few  security  safeguards. 

For  this  lack  of  security 
leadership,  the  CIO  re¬ 
ceived  accolades  from 
computer  magazines  with¬ 
out  much  accountability 
for  consequences. 

Three  years  ago,  much  of 
the  federal  administrative 
bureaucracy  became  a 
Web-page  development 
shop.  When  I  got  to  NASA,  I  asked  for 
a  count  of  Web  addresses  in  the  orga¬ 
nization;  we  stopped  at  2,904  and  4.3 
million  individual  pages.  Much  of  the 
most  effective  work  in  using  comput¬ 
ers  as  a  tool  for  collaboration  and 
communication  was  done  outside  of 
the  organizations  that  the  CIO  was 
supposed  to  guide. 

3.  Negligence.  In  the  past  decade, 
CIOs,  allied  with  enthusiastic  corpo¬ 
rate  executives,  diverted  their  atten¬ 
tion  from  managing  the  total  costs  of 
computing  to  lobbying  for  incremental 
funds  for  attention-grabbing  technolo¬ 
gies,  such  as  client  servers,  enterprise 
systems  or  Web  services.  Such  proj¬ 
ects  could  be  managed  as  separate 
tasks  and  were  presented  to  corporate 
executive  as  isolated  commitments. 
While  concentrating  on  appealing 
innovations,  organizations  neglected 
to  make  investments  in  the  reliability 
and  the  security  of  the  infrastructure. 

I  blame  the  CIOs  for  not  making  the 
case  for  the  necessary  funding  to  im¬ 
plement  networkwide  security  be- 
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is  convinced  that  even  a 
palm-size  device  with  the 
power  of  a  mainframe 
warrants  data  center 
security  measures. 


cause  that  would  have  required  the 
imposition  of  an  enterprisewide  disci¬ 
pline.  Thus,  the  CIOs  ended  up  man¬ 
aging  only  what  they  had  a  charter  to 
manage,  which  was  a  shrinking  share 
of  the  total  cost  of  IT.  With  such  dilu¬ 
tion  of  CIO  power,  nobody  stepped  up 
to  impose  order  on  the  desktops  be¬ 
cause  that  was  just  too  hard  to  do,  was 
politically  unpopular  and  was  a  losing 
proposition  from  a  budgeting  stand¬ 
point.  Increasingly  decentralized  com¬ 
puting  devices  were  allowed  to  infil¬ 
trate  an  increasingly  rickety  shared 
infrastructure  without  any  safeguards 
that  might  prevent  the  inevitable  secu¬ 
rity  collapses. 

The  time  has  come  to  pay  for  dec¬ 
ades  of  unsafe  computing.  And  the 
price  will  exceed  the  cost  of  meeting 
the  Y2k  threat.  Executive  management 
will  now  insist  on  the  following: 

■  A  complete  accounting  of  the  se¬ 
curity  of  every  computing  asset  and 
every  conceivable  entry  point  into  an 
organization’s  network.  This  will  in¬ 
clude  all  portals,  operating  systems, 
routers,  switches,  wireless  devices, 
firewalls  and  modems,  as  well  as  all 
data  entry  applications. 

■  Certification  that  there  is  a  100% 
enforcement  of  real-time  authentica¬ 
tion  and  authorization  of  access  to 
files,  to  operating  software  and  to 
applications. 

■  Government  certification  that  the 
custody  and  retention  of  all  transac¬ 
tion  records  meets  worst-case  contin¬ 
gency  scenarios. 

Through  abdication,  managerial 
absenteeism  and  negligence,  we  have 
ended  up  with  millions  of  insecure 
mainframes  on  desks  and  laptops,  and 
in  briefcases.  Microsoft  profited  from 
providing  software  that  can  be  best 
characterized  as  trying  to  serve  all,  at 
all  times.  Nevertheless,  the  lack  of 
adult  supervision  and  accountability 
from  CIOs  also  deserves  a  share  of 
the  blame  for  the  current  deplorable 
state  of  insecurity.  ©  42431 
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Middleware  is  Everywhere 


Can  you  see  it? 


M I  D  D LE  WAR E  connects  the  unconnected.  .  . 

On  demand.  And  middleware  is  software  like 
IBM  Lotus®  Workplace.  An  innovative  platform  based  on 
open  standards  that  combines  multiple  collaborative  apps 
in  a  single,  dynamic  work  environment.  It’s  one  workplace 
tuned  to  individual  roles.  For  real-time  collaboration.  Real 
business  value.  Flexible  too,  it  also  leverages  IBM  Lotus  Notes™ 
<@  business  on  demancPat  ibm.com/lotus/middleware 


1.  Shares  credit  rating.  Now. 

2.  Responds  to  mortgage  broker.  Now. 

3.  Confers  with  local  branches.  Now. 

4.  Approves  loan  with  supervisor.  Now. 

5.  Does  it  all  on  one  platform.  Now. 
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These  days,  you  are  your  information.  And  having  information  that's  less  than  accurate  is  simply  no  longer  ac 
ceptable.  Yet  with  incompatible  data  sources  and  volume  multiplying,  how  can  you  possibly  bring  all  of  your 
data  together  and  come  up  with  a  timely  and  relevant  assessment  of  your  busi¬ 
ness  you  can  trust?  The  answer  is  Informatica®  We  can  transform  your  disparate 
enterprise  data — regardless  of  source  or  application — into  a  single,  manageable, 
and  scalable  resource  that  delivers  business  insight  that  is  easy  to  use,  reliable  and  auditable.  To  learn  why  over 
80%  of  the  Fortune  100  have  turned  to  our  unified  data  integration  and  business  intelligence  solution,  just  call 
800-970-1 1 79,  or  visit  us  online  at  www.informatica.com.  Because  if  you're  only  as  good  as  your  data,  this  is 

how  to  always  be  at  your  very  best. 


INFORMATICA 

Turning  integration  into  insight. 


’  ©  2003  Informatica  Corporation.  All  rights  reserved.  Informatica,  the  Informatica  logo,  and  ‘Turning  integration  into  insight "  are  trademarks  or  registered  trademarks  of  Informatica  Corporation. 
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Developing  IT 
Skills  ‘To  Go’ 

A  national  apprenticeship 
program  combines  class¬ 
room  and  on-the-job 
learning  to  help  IT 
workers  bring  their  skills 
up  to  speed.  Page  44 


BOOK  EXCERPT 

Get  Sales  Chiefs 
On  Your  Side 

Sales  managers  can  make  or  break 
a  CRM  or  sales  force  automation 
project,  so  it’s  important  to  ensure 
that  they’re  enthusiastic  support¬ 
ers  of  such  efforts.  Page  46 


Serving 

Man 


As  the  CIO  of  an 
automotive  joint 
venture,  Joel 
Gruber  has  to 
work  with  four 
CIOs  looking 
over  his  shoulder. 
By  Kathleen 
Melymuka 


OPINION 

Satisfying  IT  Customers 
May  Be  a  Bad  Idea 

Paul  Glen  (right)  says  the  clients 
of  IT  departments  are  seeking 
expert  counsel  and  a  good  ex¬ 
perience,  not  a  fast  transaction 
or  beautiful  code.  Page  48 


WHEN  JOEL  GRUBER  BECAME  CIO  at 
RouteOne  LLC,  a  joint  venture  of 
four  major  automakers,  he  found 
himself  with  more  help  than  he 
had  bargained  for.  The  CIOs  of 
the  partner  companies  —  his  advisory  board  —  were 
very  opinionated,  senior  people  with  more  experi¬ 
ence  than  he  had.  No  one  was  quite  sure  how  to  re¬ 
late  to  one  another.  “The  situation  was  really  ill- 
defined,”  Gruber  recalls. 

As  a  result,  his  first  days 
were  filled  with  too  much 
advice,  too  much  discussion 
and  too  few  decisions  —  un¬ 
til  he  took  charge.  “I  had  to 
assert  that  this  is  my  show 
to  run  and  my  job  to  make 
or  break  it,”  he  says.  “I’d  say, 
‘I’ve  heard  all  your  input. 
Now  we’ll  do  it  this  way.’  ” 
Between  1991  and  2001, 
joint  ventures  increased 
sevenfold,  according  to  the 
MIT  Sloan  Management  Re¬ 
view  (Summer  2003).  CIOs 
in  these  hybrid  organiza¬ 
tions  need  to  learn  new 
survival  skills:  to  serve  the 
start-up  venture,  but  also 
the  founding  partners;  to  leverage  the  IT  expertise  of 
the  partners  without  being  overwhelmed  by  them; 
and  to  assert  their  own  authority  or  cede  it. 

Southfield,  Mich.-based  RouteOne  is  a  joint  ven¬ 
ture  of  the  credit  arms  of  the  Big  Three  automakers 
—  DaimlerChrysler  Services  North  America  LLC, 
Ford  Motor  Credit  Co.  and  General  Motors  Accep¬ 
tance  Corp.  (GMAC)  —  plus  Toyota  Financial  Ser¬ 
vices  Corp.  It  was  formed  late  in  2001  (Toyota  joined 
in  2002)  in  response  to  dealer  requests  for  a  Web- 
based  credit  aggregation  system.  Dealers  wanted  to 
complete  each  customer’s  credit  application  once 
and  send  it  simultaneously  to  their  in-house  credit 
companies  as  well  as  independent  lenders  for  imme¬ 
diate  responses.  Previously,  each  lender  had  to  be  ap¬ 
proached  separately,  and  responses  took  a  long  time. 
The  heads  of  the  four  global  finance  companies  re- 


RouteOne  LLC 


Mission:  To  create  a 
common,  Web-based 
credit  application  proc¬ 
ess  for  more  than 
22,000  automotive 
dealerships. 

Four  equity  partners: 

■  DaimlerChrysler  Ser¬ 
vices  North  America  LLC 

■  Ford  Motor  Credit  Co. 

■  General  Motors 
Acceptance  Corp. 

■  Toyota  Financial 
Services  Corp. 

SOURCE:  WWW  ROUTEONE.COM 
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Developing  IT  Skills 


YIKES!  Waldemar  Ramos  had  just  learned 
that  the  McDonald’s  Corp.  marketing  de¬ 
partment  needed  a  complete  project  plan 
within  30  days  for  an  IT  system  support¬ 
ing  its  new  “I’m  lovin’  it”  campaign. 

“We  didn’t  even  have  project  require¬ 
ments  at  that  point,”  recalls  Ramos,  a 
project  leader  at  McDonald’s.  Just  the 
same,  he  was  able  to  jump  into  action  —  revising  de¬ 
liverables,  figuring  out  the  new  requirements,  calcu¬ 
lating  how  the  new  priorities  would  affect  other  on¬ 
going  projects  and  drafting  a  revised  statement  of 
work.  “The  nice  thing  about  it  was  we  were  able  to 
meet  the  deadline,  as  well  as  complete  the  other 
projects,”  Ramos  says. 

Pretty  impressive  —  especially  considering  Ramos 
isn’t  even  a  full-fledged  project  manager  and  won’t 
complete  his  training  program  until  later  this  year. 

But  this  isn’t  your  average  IT  training  pro¬ 
gram,  either. 

In  February,  McDonald’s  launched  an  in- 
house  apprenticeship  program  for  IT  proj¬ 
ect  managers  in  collaboration  with  the  Computing 
Technology  Industry  Association  (CompTIA),  a 
global  trade  association.  Ramos  and  nine  other 
McDonald’s  apprentices  have  been  learning  to  be¬ 
come  project  managers  via  in-house  classroom  in¬ 
struction  and  workshops,  as  well  as  meetings  with 
peers  and  mentors. 

Most  important,  they’re  simultaneously  heading 
up  actual  —  and  sometimes  quite  crucial  —  projects, 
with  budgets  ranging  in  size  from  $50,000  to  several 
hundred  million  dollars.  One  apprentice  has  led  10 
projects  since  the  program  began.  In  order  to  com¬ 
plete  the  program,  the  apprentices  must  master  37 
skills  to  their  mentors’  satisfaction. 

“It  responds  to  what  employers  are  asking  for  —  a 
combination  of  knowledge,  certification  and  experi¬ 
ence,”  says  Neill  Hopkins,  vice  president  of  work¬ 
force  development  and  training  at  CompTIA.  “This 
is  the  first  system  of  its  kind  to  directly  relate  IT 
training  and  certifications  with  actual  on-the-job 
skill  validation.” 

Or,  put  another  way,  “We’re  taking  their  day-to- 
day  work  and  using  that  as  a  context  for  learning,” 
says  Alice  Rowland,  manager  of  information  services 
organization  development  at  McDonald’s  in  Oak 
Brook,  Ill. 

McDonald’s  apprenticeship  program  is  one  of  six 
pilots  that  CompTIA  is  helping  to  administer  as  part 
of  the  National  Information  Technology  Apprentice¬ 
ship  System.  NITAS,  which  debuts  in  early  Novem¬ 
ber,  is  aimed  at  building  skills  and  credentials  in  at 
least  seven  IT  tracks,  the  first  two  of  which  are  IT 
Generalist  and  Project  Management  (next  page).  All 
of  the  apprenticeships  are  designed  to  accelerate  the 
transformation  of  learning  classroom  theory  to  using 
on-the-job  IT  best  practices. 

The  idea  for  NITAS  actually  dates  back  to  Septem¬ 
ber  2001,  when  the  U.S.  Department  of  Labor  took  an 
interest  in  a  national  apprenticeship  program  for  IT. 
It  chose  CompTIA  to  administer  the  program  and  so 
far  has  invested  at  least  $3.8  million,  which  Oakbrook 
Terrace,  Ill.-based  CompTIA  is  matching  with  its 
own  funds. 

Since  that  time,  the  pilot  programs  have  generated 
data  to  help  CompTIA  define  which  skills,  education- 
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A  national  apprenticeship  program  combines 
classroom  and  on-the-job  learning  to  develop 
skilled  IT  workers  faster.  By  Mary  Brandel 


CIO  Ron  Danielson's  Triple  Play  of 
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How  Santa  Clara  University 

Webified 
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The  idea 


was  to  provide  more  widespread  access  to 
business-critical  enterprise  applications  without 
increasing  the  administrative  burden  on  the  IT  department.  Before 
that  goal  would  be  realized,  however,  Santa  Clara  University 
(SCU)  got  a  lesson  in  what  can  go  wrong  with  Web-based  applica¬ 
tions  and,  more  importantly,  how  to  remedy  the  problems. 


In  July  of  2002,  SCU  made  the 
move  to  PeopleSoft  8,  the  Web- 
enabled  version  of  the  popular  appli¬ 
cation  suite.  The  school  uses 
PeopleSoft  to  support  human 
resources,  financial  and  student 
administration  applications,  including 

SCU’S  REDLINE  BENEFITS 
AT  A  GLANCE: 

■  Bandwidth  reduction:  E|X  3250 
reduces  bandwidth  requirements 
by  up  to  10M  bit/sec,  saving  SCU 
at  least  $48,000  per  year. 

■  Increases  server  capacity: 

Offloads  connection  management, 
1/0  and  SSL  processing,  essentially 
cutting  server  loads  in  half. 

■  Reduces  number  of  network 
components:  Reduces  the  amount 
of  data  traffic,  enabling  network 
components  such  as  firewalls  to 
handle  more  load. 


admissions,  financial  aid  and  course 
registration  programs,  says  Ron 
Danielson,  chief  information  officer 
for  SCU,  an  8,000-student  university 
in  Santa  Clara,  Calif. 

“As  much  as  we  possibly  can, 
it’s  our  intention  to  push  access  to 
administrative  information  out  to 
students,  faculty  and  staff,”  Danielson 
says.  With  the  previous  version  of 
PeopleSoft,  that  was  a  challenge 
because  it  required  client  software  on 
each  user’s  desktop.  “With  the  Web 
front  end,  anybody  with  a  browser 
can  come  in  and  get  access.” 

Access  they  did,  so  much  so  that 
the  university’s  application  servers 
were  overloaded  and  performance 
was  much  slower  than  with  the  previ¬ 
ous  version.  “We  were  one  of  the 
first  half-dozen  universities  in  the 
country  to  upgrade  to  PeopleSoft ’s 
new  Web-based  product,  and  we 
thought  we’d  spec’d  out  our  network 
and  equipment  adequately  to  meet 
our  performance  needs,”  he  says.  “But 
we  weren’t  even  close.” 


IN  SEARCH  OF  A  FIX 

Initially,  Danielson  and  his  staff  tried 
throwing  more  hardware  and  software 
at  the  problem.  To  an  initial  configu¬ 
ration  of  one  Web  server  and  one 
application  server,  they  added  three 
more  Web  servers  and  one  new  appli¬ 
cation  server.  They  also  brought  in 
performance  management  and  soft¬ 
ware  tuning  tools,  and  changed  some 
PeopleSoft  parameters  related  to 
processing  input  from  users. 

“This  brought  performance  to  an 
‘acceptable’  level,”  Danielson  says. 
“But  now  we  had  six  servers  instead 
of  two,  and  we  were  still  spending  a 
lot  more  time  on  the  problem  than 
we  would  have  liked.” 

In  the  fall  of  2002,  the  university 
learned  about  Redline  Networks  of 
Campbell,  Calif.  Redline  makes  a 
family  of  appliances  designed  to 
improve  Web-based  application 
performance  by  offloading  from  the 
server  I/O  processing  and  connection 
management  chores,  while  compress¬ 
ing  content  to  conserve  bandwidth. 
The  appliances  also  handle  Secure 
Sockets  Layer  (SSL)  processing,  thus 
serving  to  improve  security. 

LESS  BANDWIDTH, 

MORE  PERFORMANCE 

In  November,  SCU  installed  one  of 
Redline’s  E  |  X  3250  appliances  and 
saw  an  immediate,  dramatic  improve- 
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The  Redline  E  |  X  3250  has  delivered  on  all  its  claims  for  Santa  Clara  University  CIO  Ron 
Danielson  (center)  and  his  staff,  which  includes  Alherto  Roman  (left)  and  Nita  Mukherjee. 
Not  pictured  are  Mai  Anli  Pham-Ky  and  Todd  Schmitzer. 


ment.  Bandwidth  usage  associated 
with  the  PeopleSoft  applications 
plummeted  by  70%,  thanks  to  the 
compression  features  inherent  in  the 
E  |  X  3250.  At  the  same  time,  because 
the  E  |  X  3250  handled  connection 
management  chores  and  I/O  process¬ 
ing,  server  capacity  effectively 
doubled. 

The  magnitude  of  server  capacity 
and  performance  improvements  hit 
home  when  one  of  the  university’s 
servers  went  down  for  more  than  a 
week.  “We  didn’t  even  notice  a 
change  in  performance,”  Danielson 
says.  “That  tells  us  how  much  head- 
room  the  Redline  box  has  given  us 
with  our  PeopleSoft  applications.” 

Like  the  rest  of  Redline’s  enterprise 
application  processors,  the  E  |  X  3250 
sits  in  front  of  servers  and  receives 
requests  from  hundreds  or  thousands 
of  client  browsers.  It  processes  the 
thousands  of  relatively  slow  requests 
as  they  come  in  from  users  and  shut¬ 
tles  them  to  the  appropriate  servers  at 
high  speed  over  just  a  few  dozen  per¬ 
sistent  TCP  connections. 

“As  far  as  the  Web  servers  are  con¬ 
cerned,  they  have  a  single  connection, 
which  is  to  the  Redline  box,” 
Danielson  says.  The  servers  no  longer 
have  to  perform  complex  scheduling 
of  requests  arriving  randomly  over  a 
large  number  of  connections.  Instead, 
they  service  each  response  as  it  arrives 
and  send  information  back  to  the 
enterprise  application  processor, 
which  delivers  pages  to  the  client 
browser  at  whatever  speed  the  brows¬ 
er  can  efficiently  handle. 

The  E  |  X  3250  worked  so  well  for 
SCU’s  PeopleSoft  implementation 
that  the  university  soon  installed  an 
additional  unit  to  improve  the  per¬ 
formance  of  Novell  GroupWise 
servers  that  provide  Web-based  e-mail 
access.  Here  the  E  |  X  3250  sits  in 
front  of  four  servers,  performing  load 
balancing,  connection  management 
and  compression.  For  its  GroupWise 


application,  the  university  also  takes 
advantage  of  the  E  |  X  3250’s  SSL 
offload  capability,  which  obviates  the 
need  for  the  servers  to  maintain  large 
amounts  of  user  data,  including  client 
certificate  information.  It  also  ensures 
that  end  users  have  no  direct  access  to 
the  application  servers  and  the  often- 
sensitive  information  they  contain. 

Results  from  the  GroupWise 
implementation  have  been  similar  to 
those  for  PeopleSoft:  bandwidth  con¬ 
sumption  on  the  university’s  WAN 
links  has  been  cut  in  half  and 
response  time  has  improved. 

SAVINGS,  SAVINGS, 
SAVINGS 

The  bottom  line,  Danielson  says,  is 
that  the  Redline  appliances  enable 
SCU  to  realize  savings  in  three  areas: 
bandwidth  reduction,  increased  server 
capacity  and  extended  life  cycle  of 
other  network  components. 

Bandwidth  savings  come  from  the 
compression  features  of  the  appliance, 
which  are  browser-aware  to  adaptive¬ 
ly  compress  content  for  each  request¬ 
ing  user  and  never  require  specialized 
client  software.  The  features  save  6M 


to  10M  bit/sec  of  bandwidth,  which 
Danielson  says  would  cost  the  univer¬ 
sity  an  additional  $4,000  to  $5,000 
per  month. 

In  terms  of  server  capacity, 
Danielson  figures  he  could  remove 
two  of  the  four  servers  supporting  his 
PeopleSoft  implementation  without 
suffering  a  performance  hit,  although 
he  has  opted  to  leave  the  installation 
as-is  to  allow  for  anticipated  growth 
in  the  number  of  applications  and 
users.  Similarly,  on  the  e-mail  side, 
“We  probably  won’t  have  to  grow 
that  server  farm  dramatically  to 
handle  additional  load,”  he  says. 

Just  as  the  Redline  appliances 
enable  him  to  get  more  life  out  of  his 
servers,  they  do  the  same  for  network 
components  such  as  firewalls.  “With 
the  Redline  box  reducing  bandwidth 
usage,  there’s  less  for  the  firewalls  to 
examine,”  so  a  single  firewall  can 
effectively  handle  more  load. 

In  coming  months,  SCU  will  be 
adding  to  its  Redline  implementation 
another  server  group  that  supports 
university  financial  applications. 

To  sum  up,  Danielson  says,  “This 
box  delivers  on  all  its  claims.” 


LEARN  MORE  ABOUT  REDLINE  NETWORKS  ONLINE: 

Hear  Ron  Danielson  tell  liis  story  in  an  on-demand  webcast.  Visit:  http://www.itworld.com/redline2 
Download  the  white  paper,  “The  New  Data  Center:  Toward  a  Consolidated  Platform.” 
Visit:  http://www.redlinenetworks.eom/p/whitepaperrequest 
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SANTA  CLARA  UNIVERSITY  PUTS 


“ Redline  enabled  Santa  Clara  University  to  realize  savings  in 
bandwidth ,  server  capacity  and  extended  network  life  cycle.  ” 
-Ron  Danielson ,  CIO,  Santa  Clara  University 
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al  credentials  and  certifications  should  make  up  the 
apprenticeship  tracks.  CompTIA  has  also  formalized 
the  system’s  infrastructure  and  work  processes, 
trained  consultants  on  how  to  help  employers  create 
their  own  apprenticeship  programs  and  developed  a 
marketing  strategy  to  encourage  large-scale  adoption. 

Bad  Timing? 

An  apprenticeship  program  is  obviously  a  boon  for 
people  who  want  to  start  IT  careers  and  is  good  for 
filling  gaps  during  an  IT  skills  shortage.  But  is  it  a 
good  idea  to  be  developing  new  IT  talent  at  a  time 
when  the  economy  is  still  sluggish  and  many  skilled 
IT  professionals  are  unemployed? 

“If  it  were  a  couple  of  years  ago,  and  you  couldn’t 
get  the  IT  talent,  it  would  be  a  much  more  interest¬ 
ing  program,”  says  Scott  Hicar,  CIO  at  Maxtor  Corp. 
in  Milpitas,  Calif.  “It  might  struggle  in  today’s  market 
because  companies  can  find  people  with  relevant  ex¬ 
perience.”  But  Hicar  has  positive  thoughts  about  the 
program,  too.  “It  would  help  to  have  a  standard  ac¬ 
creditation  because  it  gives  you  a  neutral  view  of  that 
person’s  experience,”  he  says. 

Jeff  Markham,  an  IT  recruiter  at  Robert  Half  Tech¬ 
nology  in  San  Francisco,  a  division  of  Robert  Half  In¬ 
ternational  Inc.,  also  questions  whether  the  market  is 
right  for  this  sort  of  program.  But  Markham  says  he 
supports  the  notion  that  “if  I  can  get  training  while 
getting  work  done,  that’s  definitely  cheaper.” 

The  biggest  benefit  of  the  program  in  this  econom¬ 
ic  climate  may  be  to  help  retain  high-quality  workers 
and  develop  skills  that  are  hard  to  find  in  the  labor 
market,  Markham  says. 

The  way  McDonald’s  has  structured  its  project 
management  apprenticeship  could  serve  just  that 
purpose.  Its  goal  was  to  improve  project  manage¬ 
ment  as  a  core  skill  area  “through  on-the-job  learn¬ 
ing,”  Rowland  says.  So  far,  she  says,  the  program  has 
shown  “statistically  significant  improvement  in 
meeting  our  business  objectives,”  including  meeting 
deadline,  budget  and  customer-satisfaction  goals. 

All  of  McDonald’s  apprentices  were  already  em- 


WHO’S  TRYING  IT? 


Employers  currently  participating  in  pilot  programs 
for  the  National  Information  Technology  Apprentice¬ 
ship  System: 


EMPLOYER  NUMBER  OF  IT  APPRENTICES 


Burlington  County  Institute  of  Technology 
Medford,  N.  J. 

20 

Internetworking/cabling 
company  (name  undisclosed) 

18 

McDonald’s 

Oak  Brook,  III. 

10 

Naval  Undersea  Warfare  Center 

Keyport,  Wash. 

10 

Exodus  Homes 

Hickory,  N.C. 

Cosmopolitan  Chamber  of  Commerce 

Chicago 

ployees  when  they  enrolled  in  the  program.  At 
least  one  —  project  leader  Dan  Wilkinson,  who 
has  worked  for  17  years  at  McDonald’s  in  and 
outside  of  IT  —  is  using  the  program  as  a  career¬ 
changing  move. 

Wilkinson,  Ramos  and  eight  others  first  completed 
three  days  of  in-house  training,  followed  by  periodic 
workshops  on  areas  requiring  more  depth,  such  as 
project  life  cycles  and  management  skills.  Mean¬ 
while,  they  were  assigned  a  four-  to  six-month  proj¬ 
ect  to  complete. 

“The  sessions  are  taught  at  a  level  where  you  can 
pick  things  up  and  use  them  right  now,”  Wilkinson 
says.  A  recent  class  on  “slip  charts,”  for  instance, 
helped  him  figure  out  where  he  was  falling  behind 
on  project  dates  and  how  to  create  a  status  report  re¬ 
flecting  that.  “There’s  no  learning  curve  —  once  you 
experience  it,  you  own  it,”  Wilkinson  says.  “It’s  an¬ 
other  tool  in  your  tool  bag.” 

The  apprentices  were  also  given  “qual  cards,” 
which  list  37  measurable  skills  and  were  developed 
with  the  help  of  industry  standards  makers  such  as 
the  Project  Management  Institute.  “In  my  first  meet¬ 
ing  with  my  mentor,  we  discussed  how  the  project  I 
was  working  on  applied  to  the  qual  card  items,” 
Wilkinson  says.  They  chose  the  most  applicable 
items  to  tackle,  and  before  the  next  meeting,  Wilkin¬ 
son  learned  all  he  could  about  those  items  and  ap¬ 
plied  them  to  his  daily  job. 

As  he  developed  competency  in  these  skills,  he 
demonstrated  his  abilities  to  his  mentor,  who 
checked  these  items  off  the  card.  When  he  works 
through  the  entire  list,  he’s  finished  with  the  pro¬ 
gram.  Wilkinson  says  he’s  halfway  through. 

CompTIA  calls  this  contextual  learning.  “When 
the  apprentice  and  mentor  sit  down  for  sign-off,  it’s 
always  within  the  context  of  providing  a  deliverable 
to  the  company,”  says  John  Aaron,  an  independent 
consultant  who’s  training  to  become  a  NITAS  con¬ 
sultant.  “It’s  very  relevant  to  what  they’re  accom¬ 
plishing  on  the  job.” 

Wilkinson  meets  with  his  mentor  two  or  three 
times  a  week.  Others,  such  as  Ramos,  meet  once  a 
week.  “It’s  a  great  opportunity  to  ask  questions  while 
you’re  not  being  judged  by  a  manager  on  what  you’re 
doing,”  says  Sally  Head,  senior  project  manager  and 
one  of  five  mentors  in  the  program.  One  apprentice 
asked  her  recently  why  change  requests  are  impor¬ 
tant.  “It’s  something  he  felt  he  should  know  but  was 
afraid  to  ask,  but  he  could  come  to  me,”  she  says. 

Apprentices  also  meet  with  their  peer  groups 
twice  a  month.  “We  can  let  our  hair  down  and  talk 
with  people  who  are  going  through  the  same  experi¬ 
ences,”  Wilkinson  says. 

Different  Approach 

As  successful  as  McDonald’s  has  been  with  its  pro¬ 
gram  for  current  employees,  the  Keyport,  Wash., 
division  of  the  Naval  Undersea  Warfare  Center  is 
just  as  happy  with  its  apprenticeship  program  that 
targets  new  hires.  Since  May  2002,  Keyport  has 
recruited  10  employees  to  enter  its  three-year  ap¬ 
prenticeship  program,  says  Christina  Rude,  training 
facilitator  in  the  information  resources  department 
at  Keyport. 

It  takes  three  years  to  complete  Keyport’s  program 
because  apprentices  go  through  an  IT  generalist  pro- 
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IN  THE  NATIONAL  INFORMATION  TECHNOL¬ 
OGY  APPRENTICESHIP  SYSTEM,  the  IT  Gener¬ 
alist  and  IT  Project  Management  tracks  are  com¬ 
plete  and  ready  to  implement.  Other  tracks 
planned  for  2004  include  the  following: 

■  Information  assurance/security 

■  IT  enterprise  management 

■  Database 

■  Web  e-commerce 

■  Network  specialization 

On  the  just-launched  NITAS  Web  site  (www. 
nitas.us),  employers  can  obtain  information  about 
the  apprenticeship  tracks,  on-the-job  learning 
techniques  and  how  mentors  can  be  most  effec¬ 
tive.  The  site  will  also  offer  Web-based  tools  for 
tracking  and  assessing  apprentice  progress  and 
generating  certificates. 

Employers  that  want  to  implement  an  NITAS 
apprenticeship  program  can  also  register  at  the 
Web  site.  Registration  fees  vary  depending  on  the 
number  of  apprentices  participating  and  compa¬ 
ny  size:  the  fees  will  be  waived  for  the  remainder 
of  2003. 

-MaryBrandet 


gram  first  and  then  into  a  specialty  of  either  net¬ 
working  or  programming.  In  that  time  frame,  appren¬ 
tices  complete  120  credits  of  education  or  training, 
either  at  the  local  community  college  or  through  in- 
house  activities;  four  certifications;  and  4,000  hours 
of  structured  on-the-job  learning.  In  2004,  Keyport 
plans  to  expand  its  specializations  to  include  securi¬ 
ty,  multimedia  and  database. 

Like  McDonald’s  with  its  qual  cards,  Keyport  has 
“building  blocks”  that  apprentices  must  master,  rang¬ 
ing  from  interpersonal  skills  and  public  speaking  to 
technical  skills  such  as  security  and  Web  design.  The 
apprentices  start  out  making  $12  per  hour,  progress¬ 
ing  to  $20  per  hour.  Upon  completing  the  program, 
they  may  be  eligible  for  full-time  positions. 

Rude  says  the  Keyport  organization  now  believes 
that  on-the-job  learning  is  the  fastest  way  to  develop 
fully  productive  employees  and  the  best  way  to 
transfer  knowledge  from  more  experienced  workers 
to  the  less  experienced. 

CompTIA  officials  hope  that  other  companies  will 
start  to  feel  the  same  way.  The  association  predicts 
that  384,000  IT  workers  will  become  registered  ap¬ 
prentices  and  that  6,700  employers  will  register  as 
on-the-job  learning  providers  in  the  next  five  years. 

But  whether  the  program  becomes  that  wide¬ 
spread  will  depend  on  the  economy.  “I  think  we’re  a 
little  too  early  in  this  slow,  gradual  pickup  in  the 
market  to  know  if  a  lot  of  companies  are  going  to  do 
this,”  Markham  says.  “But  it’s  a  lot  more  valuable  to 
have  real-world  working  training  than  [to  get  train¬ 
ing]  through  a  class.”  O  42203 


Brandel  is  a  Computerworld  contributing  writer  in 
Grand  Rapids,  Mich.  She  can  be  contacted  at 
mary.brandel@comcast.net. 
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F*  ield  sales  representatives 
1  are  key  to  the  success  of  any 
CRM  sales  suite,  but  there’s 
another  group  of  users  that 
may  be  even  more  impor¬ 
tant:  their  sales  managers. 
The  sales  manager  is  not  only  in 
charge  of  territory  assignments  for  his 
sales  reps,  he’s  also  the  manager  and 
coach  who  helps  ensure  his  sales  reps 
meet  their  objectives.  In  order  to  do  all 
of  this  effectively,  the  sales 
manager  needs  constant  infor¬ 
mation  from  the  sales  reps 
about  their  leads,  their  active 
prospects  and  the  progress  of 
their  opportunities.  A  CRM  tool  is  ex¬ 
tremely  well  positioned  to  provide  this 
information  and  can  make  a  sales  man¬ 
ager  much  more  effective.  In  fact,  the 
sales  manager  probably  has  the  most 
to  benefit  from  the  use  of  a  CRM  or 
sales  force  automation  tool.  He’s  your 
best  ally  in  the  battle  for  mind  share 
and  buy-in  for  a  CRM  project. 

The  close  relationship  a  sales  man¬ 
ager  has  with  his  team  of  field  reps 


BOOK 

EXCERPT 


also  means  he’s  the  best  person  to  sell 
them  on  the  benefits  of  a  CRM  system. 
The  sales  manager  has  the  key  advan¬ 
tage  of  being  able  to  make  usage  man¬ 
datory  and  to  get  compliance.  If  some¬ 
one  has  to  wield  the  stick,  the  sales 
manager  has  the  best  chance  of  doing 
it  effectively. 

On  the  positive  side,  a  sales  manager 
can  help  his  sales  reps  accept  the  new 
processes  and  benefits  and  answer  the 
famous  question,  “What’s  in 
it  for  me?”  He  can  also  insist 
that  all  reporting  and  activity 
management  be  done  using 
the  new  system  —  not  e-mail 
attachments. 

In  weekly  meetings,  for  example,  if 
a  sales  rep  refers  to  a  lead  or  an  ongo¬ 
ing  opportunity  that  he  hasn’t  entered 
in  the  new  system,  all  the  sales  manag¬ 
er  has  to  say  is  that  it’s  not  visible  on 
his  laptop  and  he  won’t  talk  about  it 
until  it  is.  You  can  be  reasonably  sure 
that  within  one  week  of  this  sort  of 
training,  everyone  on  his  team  will  be 
using  the  system. 


On  the  negative  side,  the  sales 
manager  can  do  exactly  the  opposite, 
with  devastating  results.  During  the 
training  session  for  one  real-life  sales 
force  automation  system,  for  example, 
sales  managers  categorically  rejected 
the  new  system  with  comments  like, 
“Whoever  dreamed  up  these  processes 
doesn’t  know  how  we  really  work.”  As 
the  ratio  of  sales  managers  to  sales  reps 
is  about  1  to  8,  you  can  see  that  you 
don’t  need  more  than  a  handful  of  sales 
managers  to  send  an  implicit  or  explicit 
message  of  noncooperation  to  their 
teams,  effectively  stalling  the  project. 

So  how  can  we  get  buy-in  from  these 
all-important  sales  managers?  The  ba¬ 
sic  prerequisite  is  an  operational  pilot 
program  with  full  participation  of  a 
sales  manager  and  his  team.  After  a 
successful  pilot  (which  should,  by  defi¬ 
nition,  yield  at  least  one  enthusiastic 
sales  manager),  the  rollout  for  the  rest 
of  the  project  should  include  the  fol¬ 
lowing  key  activities  and  milestones: 

1.  A  one-day  off-site  workshop  for  all 
sales  managers.  The  goal  is  to  sell  the 
system  and  the  benefits  of  the  new  or 
changed  processes.  This  workshop  is 
run  by  the  CRM  project  team,  with  the 

full  blessing  and  participa-  _ 

tion  of  the  sales  director. 

This  group  will  demon¬ 
strate  the  pilot  system,  em 
phasizing  the  lessons 
learned  and  quantifying 
(wherever  possible)  the 
benefits.  This  should  be 

followed  by  a  hands-on  session  so  that 
they  can  get  a  feel  for  the  new  tool. 
Open  debate  about  the  pros  and  cons 
should  be  encouraged  to  get  all  the  is¬ 
sues  on  the  table  for  an  informed  deci¬ 
sion.  At  the  end  of  the  workshop,  there 
should  be  a  vote  on  how  to  proceed, 
based  on  real  benefits  and  concerns. 

2.  The  feedback  from  this  workshop 
should  determine  whether  there  will 
be  a  full-scale  rollout.  If  the  sales  man- 
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about  CRM  projects,  visit 
our  Knowledge  Center: 

O  QuickLink  k1300 
www.computerworld.com 


GET  SALES  CHIEFS 

ON  YOUR  SIDE 


Sales  managers  can  make  or  break  a  CRM  or 
sales  force  automation  project.  BY  MICHAEL  GENTLE 


TOP  FIVE  REASONS 


Project  initiated  with  unclear 
goals,  metrics  and  expectations 

Poorly  defined  or 
flawed  sales  processes 

Lack  of  commitment  from 
senior  executives,  sales  man¬ 
agement  and  channel  partners 

Lack  of  strong  buy-ln 
from  salespeople 

Too  much  emphasis  on  man¬ 
agement  needs;  not  enough 
emphasis  on  salespeople 
and  customers 

■SOURCE.:  GARTNER  INC.,  STAMFORD,  CONN- 


agers  aren’t  sold  on  the  benefits,  for 
whatever  reason,  why  turn  the  project 
into  a  crapshoot  and  proceed  with  a 
rollout  to  sales  reps  who’ll  take  their 
cue  from  their  sales  managers? 

3.  Sales  managers  must  be  present  at 
the  training  sessions  for  their  teams  of 
sales  reps.  The  fact  that  they  already  at¬ 
tended  the  workshop  must  under  no 
_____  circumstances  be  an  excuse 

to  skip  the  training  session. 
They’re  there  to  anticipate 
objections,  placate  Luddites 
and  ensure  buy-in  to  the 
new  processes.  They  have 
to  make  it  abundantly  clear 
that  from  the  very  next  day, 
the  new  system  will  be  the  only  channel 
of  communication  for  sales  reporting. 

4.  Since  sales  managers  are  laying 
their  credibility  on  the  line,  the  result¬ 
ing  system  must  be  reliable,  with  high- 
quality  data  and  very  extensive  sup¬ 
port  during  the  first  few  weeks.  Other¬ 
wise,  even  the  most  well-intentioned 
sales  managers  might  defect  and  fall 
back  to  their  old  ways.  You  won’t  get  a 
second  chance. 

Major  battles  are  won  by  choosing 
your  allies  wisely,  and  sales  managers 
are  the  best  allies  for  a  CRM  project.  If 
you  don’t  have  this  buy-in  —  not  just 
“signed-off”  buy-in,  but  actual  enthusi¬ 
astic  and  palpable  buy-in  —  you  might 
as  well  put  the  project  on  hold.  Sales 
managers  can  stop  any  CRM  initiative 
dead  in  its  tracks  simply  by  saying 
(rightly  or  wrongly)  that  it  will  hurt 
sales.  And  there  won’t  be  much  the 
sales  director  can  do  about  it.  ©  41899 


This  article  was  excerpted  from  The 
CRM  Project  Management  Handbook 
(Kogan  Page  Ltd.,  2002).  Gentle  is  an 
international  CRM  consultant  based 
in  Paris. 
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surprisingly  affordable  price.  CLARiiON  networked  storage  packages  are  complete  hardware,  software, 
and  service  bundles  that  feature  EMC’s  award-winning  technology  and  SAN  switches  from  Brocade! 
Now  at  prices  that  can  help  you  safeguard  your  budget  as  well  as  your  information. 

Just  visit  www.EMC.com/CX200  or  call  1-866-EMC-1500  to  get  started. 


EMC2 


Find  an  authorized  EMC  Velocity2  Partner 
at  www.EMC.com/velocity. 


Get  on  the  best  growth 
path  in  storage. 


EMC,2  EMC,  where  information  lives,  Navisphere,  and  CLARiiON  are  registered  trademarks  and  Connectrix  and  Access  Logix  are  trademarks  of  EMC  Corporation. 
Brocade  is  a  registered  trademark  of  Brocade  Communications  Systems,  Inc.  ©2003  EMC  Corporation.  All  rights  reserved. 
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States’  Outsourcing 
To  Reach  $23B 

Spending  on  IT  outsourcing  by 
state  and  local  agencies  is  ex¬ 
pected  to  increase  from  about 
S10  billion  this  year  to  more  than 
S23  billion  by  2008,  according  to 
the  “State  &  Local  Outsourcing 
MarketView,”  published  by  Input, 
a  Reston,  Va.-based  consulting 
firm.  The  report  cites  anticipated 
shortages  in  experienced  govern¬ 
ment  IT  workers  and  state  rev¬ 
enues  as  factors  driving  the  out¬ 
sourcing  increase.  Repetitive 
processes  and  transactions,  such 
as  Medicaid  and  welfare  pay¬ 
ments,  are  the  types  of  services 
that  will  most  likely  be  turned 
over  to  outside  vendors. 


Ensenda  Taps  IT 
Exec  From  UPS 

Ensenda  Inc.,  a  San  Francisco- 
based  delivery  company,  has 
named  Gene  Wojciechowski  as 
vice  president  of  technology.  He 
will  lead  customer  and  partner  in¬ 
tegration  and  other  technology 
efforts.  Wojciechowski  has  27 
years  of  IT  experience,  specializ¬ 
ing  in  the  supply  chain  and  logis¬ 
tics  management  industries.  Be¬ 
fore  joining  Ensenda,  he  was  CIO 
at  UPS  Freight  Services,  where 
he  led  a  staff  of  more  than  200, 
and  was  also  an  information  sys¬ 
tems  executive  at  USL  Capital 
Corp.  Wojciechowski  will  report 
to  Ensenda  CEO  Chris  Mannella. 


Curative  Health 
Appoints  New  CIO 

Anne  Bruce,  a  former  IT  leader 
at  IBM,  Ernst  &  Young  Interna¬ 
tional  and,  most  recently,  eLoyal- 
ty  Corp.,  has  joined  Curative 
Health  Services  Inc.  as  CIO.  In 
her  new  role  at  the  Hauppauge, 
N.Y.-based  disease  management 
company,  she  will  oversee  the 
consolidation  of  all  IT  systems  to 
one  platform  and  other  IT  strate¬ 
gies  designed  to  expand  Cura¬ 
tive’s  Specialty  Pharmacy  and 
Wound  Care  businesses.  Bruce 
will  report  to  Curative  CEO 
Joseph  Feshbach. 


PAUL  GLEN 


Satisfying  IT  Customers 
May  Be  a  Bad  Idea 


Most  it  departments  I  encounter 

say  “customer  satisfaction”  is  among 
their  key  goals.  Unfortunately,  this 
idea  seems  to  lead  too  often  to  poor 
results.  While  the  sentiments  are  laud¬ 
able,  the  law  of  unintended  consequences  seems  to  in¬ 
terfere.  Goals  are  tricky  things.  Well-intentioned  yet 
poorly  selected  goals  frequently  lead  organizations  to 


do  exactly  the  wrong 
things. 

For  example,  think  about 
the  Avis  car  rental  people. 

Their  slogan  is  “We  Try 
Harder.”  I  imagine  them 
emphasizing  the  impor¬ 
tance  of  trying  harder 
every  day.  And  being  a 
good  company,  the  staff  re¬ 
sponds  by  trying  harder  all 
the  time.  That’s  nice  in  a 
motherhood-and-apple-pie 
kind  of  way,  but  as  a  cus¬ 
tomer,  I  don’t  really  care 
how  hard  they  try.  I’m  con¬ 
cerned  with  how  well  they 
succeed.  If  they  offer  me 
flawless  service  and  great  prices  with¬ 
out  breaking  a  sweat,  I’m  thrilled.  If 
I’m  treated  to  long  lines  and  high 
prices  from  earnest  and  overworked 
staffers,  I’m  not  a  happy  customer. 
There  are  no  good  grades  for  effort. 

My  observation  is  that  customer 
satisfaction  is  generally  one  of  those 
goals  that  misleads  people  on  both 
words:  customer  and  satisfaction.  And 
what  may  seem  like  a  petty  case  of 
semantics  leads  well-intentioned 
professionals  astray.  Inappropriate 
metaphors  make  poor  foundations  for 
reasoning  about  day-to-day  decisions. 

IT  departments  don’t  really  have  cus¬ 
tomers;  they  have  clients.  The  dictionary 
definition  of  customer  is  “one  who 
purchases  a  commodity  or  service.” 
People  striving  for  customer  satisfac¬ 


tion  tend  to  think  of  a 
customer  as  someone 
who’s  involved  in  a  trans¬ 
action,  someone  standing 
in  a  checkout  line  making  a 
discrete  purchase. 

But  IT  customers,  even 
if  they  are  paying  ones, 
aren’t  involved  in  a  short¬ 
term  deal.  They’re  in¬ 
volved  in  a  long-term  rela¬ 
tionship  with  a  group  of 
highly  skilled  profession¬ 
als.  They’re  really  clients, 
which  the  dictionary  de¬ 
fines  as  “people  who  en¬ 
gage  the  professional  ad¬ 
vice  or  services  of  others.” 
And  the  dynamics  of  a  professional 
partnership  are  quite  different  from 
those  of  a  commodity  transaction. 

Using  the  image  of  a  customer  often 
leads  to  the  “customer  is  always  right” 
mentality  that’s  so  necessary  when 
every  transaction  is  a  new  deal.  But  in 
this  case,  the  customer  isn’t  always 
right.  Clients  come  for  expert  counsel, 
not  sycophantic  submission. 

Satisfaction  comes  from  experience,  not 
technology.  Most  people  in  technical  de¬ 
partments  assume  that  their  clients 
judge  them  by  the  quality  of  their 
technology.  Of  course,  this  seems  like 
a  natural  assumption.  Technology  is 
what  they’re  buying  —  isn’t  it? 

Customers  may  judge  their  satisfac¬ 
tion  in  large  part  by  the  quality  of  the 
products  they  purchase,  but  clients 


PAUL  glen  is  the  author  of 
Leading  Geeks -  How  to 
Manage  and  Lead  the 
People  Who  Deliver 
Technology  (Jossey-Bass 
Pfeiffer.  2002)  and  prin¬ 
cipal  of  C2  Consulting  in 
Los  Angeles.  He  can  be 
reached  at  info® 
c2-consufiing.com. 


don’t.  Since  clients  look  to  you  for  ex¬ 
pertise,  they’re  rarely  in  a  position  to 
judge  the  quality  of  your  work. 

While  clients  can  usually  distin¬ 
guish  between  adequate  and  inade¬ 
quate  work,  they  may  not  be  able  to 
distinguish  between  good  and  brilliant 
work.  If  they  knew  enough  to  differen¬ 
tiate,  they  probably  wouldn’t  need 
your  help. 

So  instead,  they  judge  the  quality  of 
your  work  based  on  proxies.  They 
judge  based  on  the  experience  of  be¬ 
ing  a  client  rather  than  the  beauty  of 
your  code. 

Imagine  that  you  hired  a  lawyer  to 
write  your  will.  How  would  you  de¬ 
cide  if  you  were  satisfied?  Your  deci¬ 
sion  probably  wouldn’t  be  based  on 
whether  the  will  was  written  in  per¬ 
fect  iambic  pentameter.  Assuming  the 
legal  document  contained  the  key 
things  that  you  requested,  you  would 
judge  based  on  the  experience  of 
working  with  the  lawyer. 

Did  you  receive  the  deliverables  on 
time?  Did  you  get  explanations  in  lan¬ 
guage  that  you  understood?  Were  you 
condescended  to?  Was  the  price  as 
promised?  Was  the  lawyer  available 
when  you  wanted  to  talk? 

Satisfaction  in  professional  relation¬ 
ships  is  based  more  on  the  experience 
of  the  relationship  than  on  the  quality 
of  the  product.  Using  customer  satis¬ 
faction  as  a  goal  too  often  leads  to  ef¬ 
forts  to  improve  satisfaction  by  im¬ 
proving  the  product,  emphasizing  the 
one  thing  that  your  clients  probably 
won’t  notice. 

So  instead  of  focusing  on  customer 
satisfaction,  a  better  goal  is  to  create  a 
quality  “client  experience.”  When  you 
do  that,  both  you  and  your  clients  can 
share  in  a  more  satisfying  relationship. 
©  42156 
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The  right  management  can  put  you  in  control  of  your  infrastructure, 
not  the  other  way  around. 


Unicenter®  Infrastructure  Management  Software 


So  long,  mayhem.  Managing  on-demand  computing  is  here.  Unicenter  infrastructure  management  software  lets  you  take  control 
of  your  infrastructure  so  you  can  be  more  responsive  to  business.  With  automation  and  self-healing  capabilities  Unicenter  can 
help  control  costs  and  empower  you  to  do  more  with  less.  Unicenter  also  lets  your  infrastructure  react  to  changes  in  real  time, 
so  your  IT  and  business  priorities  are  always  in  sync.  Finally,  it  is  based  upon  a  service-oriented  architecture  that  simplifies 
your  IT  environment,  so  your  infrastructure  is  easier  to  manage.  To  learn  how  to  get  more  value  out  of  your  infrastructure, 
or  to  get  a  white  paper,  go  to  ca.com/infrastructure. 
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i.T.  Professionals 

Earn  Your  Master’s  Degree  Online! 


M.S.  Degrees 

Available  in: 

•  Network  Security 

•  Computer  Science 

•  Electrical  Engineering 

•  Information  Architecture 

•  Information  &  Telecommunications 
Systems  Management 

•  Business  Administration  (MBA) 


Real  time  evening  courses 

Live  Audio  Lectures 

and  Student  Interface 

Fully  Accredited 


888-522-7486  <x3026)  www.capitol-college.edu 
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Reach  Respected  IT  Leaders  in 

COMPUTERWORLD 

Marketplace  Advertising  Section 

The  Computerworld  Marketplace  advertising  section 
reaches  more  than  1.8  million  IT  decision  makers  every 
week.  Marketplace  advertising  helps  Computerworld 
readers  compare  prices,  search  for  the  best  values, 
locate  new  suppliers  and  find  new  products  and  services 
for  their  IT  needs. 


To  advertise,  call  212-655-5111 
or  email  print@ven.com 
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With  Spector  CNE  on  your  network,  you 
will  easily  prevent  or  eliminate  problems 
associated  with  Internet  and  PC  abuse. 

Spector  CNE  provides  an  immediate  and 
accurate  record  of  every  employee's: 


A  few  minutes  a  day  of  personal  surfing,  online  shopping  and  chatting  may  seem  harmless, 
but  consider  this... 

A  recent  study  concluded  that  employees  spend  an  average  of  75  minutes  per  day  using 
office  computers  for  non-business  related  activity  (surfing  porn,  gambling,  shopping  or  even 
searching  for  sex  online).  That  translates  into  an  annual  loss  of  $6250  per  employee  or  more 
than  $300,000  per  year  down  the  drain  for  a  company  of  just  50  employees. 

So  how  do  you  catch  guilty  employees  who  won't  admit  they  are  stealing  company  time? 

Introducing  Spector  CNE  -  Corporate  Network  Edition 

At  the  touch  of  a  button,  you  can  monitor  any  employee,  any  time,  anywhere  on  the 
network.  Spector  CNE  secretly  records  and  archives  chat  conversations,  instant  messages 
(AOL,  MSN  and  Yahoo),  emails  (including  Outlook,  Exchange,  AOL  and  web-based  mail  like 
Hotmail),  web  sites  visited,  keystrokes  typed,  files  downloaded,  programs  run  and  more. 

And  unlike  many  filtering  and  blocking  tools,  Spector  CNE  records  everything  they  do  in 
exact  visual  detail.  So,  you  have  absolute  proof  that  goes  way  beyond  just  knowing  they 
visited  porn.com. 

Take  control  of  employee  PC  and  Internet  abuse  with  Spector  CNE.  It'll  be  the  best 
software  investment  you  make  this  year. 


Emails  Sent  &  Received 


Chat/Instant  Messages 


Keystrokes  Typed 
Web  Sites  Visited 
R#|  Programs  Launched 


VCR-like  Snapshot  Recording 


I  pass  !| 
company  secrets 
via  the  web 


I  surf  porn  websites 
from  behind  1 
my  cubicle  walls  1 


'right  2003  SpectorSoft  Corporation.  Alt  rights  reserved. 
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To  team  more  about  Spector  CNE  and 
receive  a  FREE  cost  savings  analysis  for 
your  business  call  1-888-598-2788 
or  visit  www.SpectorCNE.com 


M  5 w 

m 

g~. 

-  - :  •  : 

SOFTWARE  CONSULTANT  - 
HR/PAYROLL  SPECIALIST 

Resp.  for  analyzing,  dsgng, 
dvlpng  &  implmntng  computer  & 
business  applns  for  existing  or 
proposed  HR  Info.  Sys.  &  payroll 
sys.  such  as  retirement  savings, 
health/benefit,  flexible  spending 
allowance  and/or  direct  deposit 
sys.  Specific  duties  will  include: 
(i)  dvlp,  implmnt  &  improve  HRIS 
&  payroll  programs,  sys.,  applns 
&  related  procedures;  (ii)  encod¬ 
ing,  testing,  debugging  & 
installing  programs  &  other  sys. 
utilizing  indepth  knowledge  of 
PowerBuilder,  SQL,  PL/SQL  & 
Oracle  w/in  Sun  Solaris,  HP 
UNIX  &  Windows  2000  environ¬ 
ments;  (iii)  dvlpng  &  maintaining 
documentation  related  to 
HRIS/payroll  sys.  dvlpmnt/main- 
tenance;  &  (iv)  keeping  abreast 
of  technological  advances  to 
HRIS  &  payroll  sys.  through 
monitoring  professional  journals 
and/or  attending  trade 
shows/seminars.  Bach,  degree 
in  Comp.  Sci.,  Comp.  Info.  Sys., 
Math  or  Engnrg  +  2  yrs  exp.  in 
position  offered  or  as  a  Software 
Engnr,  Sys.  Analyst,  Prog. 
Analyst  or  Appln  Dvlpr  reqd. 
Exp.  must  include:  (1) 
HRIS/Payroll  sys.  including 
401  (k)  GUST  &  PayGO;  (2) 
PowerBuilder  8.0  &  6.5  &  SQL  & 
PL/SQL;  (3)  Oracle  8.i;  &  (4) 
Sun  Solaris  &  HP  UNIX  11  & 
Windows  2000.  High  mobility 
preferred.  40  hrs/wk,  8am  - 
5pm,  $64,240/yr.  Qualified 
applicants  submit  resume  to  Site 
Manager,  Armstrong  County 
CareerLink,  1270  North  Water 
Street,  PO  Box  759,  Kittanning, 
PA  16201-0759.  Refer  to  Job 
Order  No.  WEB  367232. 


Software  Development  Eng¬ 
ineer:  Complete  translation  of 
company  software  products  and 
options  into  Japanese. 
Implement  localization  and 
translation,  and  formulate  a 
technical  plan  for  the  company’s 
products  to  be  fully  enabled  for 
globalization.  Use  Microsoft 
Visual  C++  and  Visual  Basic, 
HTML,  Java  Script  and  XML. 
Utilize  change  tracking  software 
tools  and  perform  software 
development  in  Microsoft 
Windows  98  and  NT/2000/XP. 
Participate  in  client  server  and 
web  based  applications  and 
architectures.  Requirements 
include  a  Bachelor's  degree  or 
equivalent  in  Computer  Science, 
Physics,  an  Engineering  disci¬ 
pline  or  closely  related  field  and 
at  least  five  years  of  work  expe¬ 
rience  in  the  job  offered  or  relat¬ 
ed  field  of  software  engineering 
with  a  specialization  in  localiza¬ 
tion.  Requires  proficiency  in 
Japanese  language  for  transla¬ 
tion  and  localization  purposes. 
Applicants  must  have  unrestrict¬ 
ed  authorization  to  work  in  the 
United  States.  Salary  $74,290/ 
year.  40  hours/wk.  Respond 
with  two  copies  of  resume  to 
Case  #200202798,  Labor 
Exchange  Office,  19  Staniford 
St..  1st  FI.,  Boston,  MA  02114 


Seeking  qualified  applicants  for 
the  following  positions  in 
Memphis/Collierville,  TN: 
Senior  Programmer  Analyst. 

Formulate/define  functional 
requirements  and  documenta¬ 
tion  based  on  accepted  user  cri¬ 
teria.  Requirements:  Bachelor's 
degree  or  equivalent  in  comput¬ 
er  science,  MIS,  engineering  or 
related  field  plus  5  years  of 
experience  in  systems/applica¬ 
tions  development.  Experience 
with  object-oriented  program¬ 
ming  languages,  application 
server  technologies  and  a  Java 
Messaging  System  also 
required.  ‘Master’s  degree  in 
appropriate  field  will  offset  2 
years  of  general  experience. 
Submit  resumes  to  Sibi  George, 
FedEx  Corporate  Services, 
1900  Summit  Tower  Blvd.,  Suite 
1400,  Orlando.  FL  32810.  EOE 
M/F/D/V. 


Senior  Systems  Analyst. 
Perform  technical/analytical 
work  on  new/existing  computer 
software  components/programs. 
May  involve  work  on  problem 
domain  definition/analysis  and 
program  code  design/develop¬ 
ment.  Design/implement  soft¬ 
ware  objects/structures,  efficient 
task-focused  GUI  components 
and  design.  Design/implement 
software  domain  models/other 
components  and  assist  with 
incorporation.  Produce  easy  to 
use  interface  designs  using 
internal  design  standards. 
Provide  documentation/descrip¬ 
tions  for  design/projects. 
Mentor/train  members  of  the 
Development  Group.  Must  have 
Bachelor's/foreign  equivalent  in 
Computer  Science,  Engineering, 
or  related.  4  years  experience  in 
position  or  as  Programmer 
Analyst,  Systems  Analyst, 
Software  Systems  Engineer,  or 
related.  Applicable  4  years 
experience  must  include  4  years 
experience  with  a  Windows  or 
.NET  based  programming  lan¬ 
guage  (Delphi  preferred;  C+, 
Eiffel,  C++,  or  other  object-ori¬ 
ented  such  as  Java  acceptable); 
3  years  original  problem  domain 
analysis,  design,  and  implemen¬ 
tation  in  accordance  with  object- 
oriented  principals/methods;  4 
years  experience  with  current 
relational  database  products 
(MS-SQL  Server  preferred; 
Oracle,  DB2,  or  Sybase  accept¬ 
able),  including  database 
schema/SQL  statement  design. 
40  hrs/wk,  9-5.  $78400/year. 
Must  have  proof  of  legal  author¬ 
ity  to  work  in  the  US.  Send 
resume  to  Iowa  Workforce 
Center,  1700  S.  1st  Ave.  Iowa 
City,  IA  52244-2390.  Please 
refer  to  Job  Order  IA1 101781 . 
Employer  paid  advertisement. 


Consultant.  Multiple  Positions. 
Perform  data  analysis,  design, 
architect  &  modeling  tasks  for 
OLTP  &  DW  databases  in  an 
environment  incl.  IBM  RS/6000 
Servers,  AIX4.3,  IBM  UDB  7.1, 
Autoloader,  Data  Junction  7.5.1, 
Informatica  5.0,  Microstrategy 
7.2.2,  Microstrategy  Desktop 
7.2.2,  Narrowcast  Server,  MDX 
Adapter,  Windows  98/NT  PC 
Anywhere  9.2.1,  Citrix  4.2  &  All 
Fusion  Erwin  4.1.  Develop 
Logical/Physical  Data  Models 
using  Star/Snowflake  schema 
design  &  Data  Marts  as  an 
Architect  using  ALL  Fusion 
Erwin  4.1,  with  sizing  estima¬ 
tions.  Perform  analysis  tuning 
using  Visual  Explain,  Event 
Monitor,  Snapshot  monitor  and 
DB2  trace  in  OLAP 
Environment.  Implement  Extrac¬ 
tion,  Transformation  &  Load 
mapping  &  sessions  using 
Informatica  5.0  ETLTool.  Design 
&  modify  Unix  Scripts.  Req: 
Masters  in  Computer  Sci.  or 
Computer  Eng.  40-hr  wk. 
Job/Interview  Site:  Glendale, 
CA.  Send  resume  to  Systech 
Solutions,  Inc.,  550  N.  Brand 
Blvd.,  #1200,  Glendale,  CA 
91203 


0ET2S 

Nvtwo'k  5*r yrc*  Solution* 

NET2S  is  a  leading  International  e- 
business,  information  technology, 
and  communication  infrastructure 
consulting  firm.  We  are  currently 
seeking  for  the  following  positions: 

•  Sr.  Tibco  (RV,  Hawk,  Ingetration 
Manager)  Developer 

•  IT  Risk  Mgmt  Security  Architect 

•  Sun  One  /  Siteminder  Architect 

•  Business  Objects  /  Cognos 
Developers 

•  NET  Architect 

All  positions  require  BS/MS  degree 
with  a  minimum  of  2  to  3  years  of 
experience  in  the  field.  Must  pos¬ 
sess  excellent  communication 
skills  as  well. 

NET2S,  82  Wall  Street,  Suite  400, 
New  York,  NY  10005,  Fax:  (212) 
279-1960;  Phone  (212)  279-6565;  or 
Email.  iQbUS-ny@n.8t2s,£Qm 


Advanced  Programmer  Analyst. 
Design,  develop  &  implement 
business  application  systems  in 
client  server  &  web  based  envi¬ 
ronments;  administer  middle  tier 
environment  using  MTS/COM+; 
design  &  develop  COM  compo¬ 
nents  using  Visual  Basic,  SQL 
Server,  and  C/C++  on  Windows 
NT  and  UNIX  platforms. 
Requirements:  Bach,  degree  in 
Comp.  Sci.,  Math,  or  related 
field  PLUS  4  yrs.  in  job  or  4  yrs. 
as  Systems  Analyst/Prog¬ 
rammer  performing  software 
design  &  developing  &  imple¬ 
menting  business  application 
systems  in  client  server  environ¬ 
ment  incl.  2  yrs.  experience  in 
the  client  server/web  based 
environments  using  MTS/ 
COM+,  Visual  Basic,  SQL 
Server,  and  C/C++  on  Windows 
NT  and  UNIX  platforms.  Send 
resume  to  Speedway 
SuperAmerica  LLC  c/o 
Corporate  Recruiting,  500 
Speedway  Drive,  Enon,  Ohio 
45323.  Fax:  (937)  863-6722 


SW  DESGN  ENGR.  Desgn  & 
devlp  SW/firmware  for  new 
prducts,  includng  desgn, 
implemntn  &  verificatn  of  SW 
progrms  &/or  firmware/HW  sys 
&  the  documentatn  to  produce  it 
in  quantity  &  supprt  it;  or  startng 
w/  such  documentatn,  responsi¬ 
ble  for  maintng  existng  prducts. 
Implemnt  SW  featrs  to  increase 
performnc  &  reliability.  Desgn, 
devlp,  test  &  supprt  SW  while 
investigatng  &  understandng 
end-user  reqs.  Monitor  projct 
budget  &  schedule  to  ensure 
implemntn  is  in-line  w /  projct 
parametrs.  Resolve  reprted 
defects  from  implemnted  SW. 
Req:  Bach  degr  or  foreign  degr 
equiv  in  CS,  CE,  EE  or  related 
engrg  field  +  2  yrs  exp  in  job 
offered  or  2  yrs  as  Sys  or  SW 
Engr.  Sal:  $71,520/yr.  Loc:  Ft. 
Collins,  CO.  8am-5pm, 
40hrs/wk.  Application  is  by 
resume  only.  Send  resume  to: 
WORKFORCE  DEVELOP¬ 
MENT  PROGRAMS,  P.O.  BOX 
46547,  DENVER,  CO  80202. 
Ref:  JO#C05059276.  Must  have 
proof  of  legal  authority  to  work  in 
U.S. 


Sr.  Consultant.  Consult  w  / 
clients  on  implementation  of 
Co.'s  trading  &  risk  management 
system  w /  respect  to  energy 
trading  &  risk  mgt.  business 
processes  &  technical  aspects; 
assist  clients  in  analyzing  & 
modeling  valuation  &  risk  of 
energy  assets  &  trades  through 
financial  analytical  techniques; 
support  Co.'s  clients  by  gather¬ 
ing  business  reqs,  developing 
customized  &  new  product  func¬ 
tionalities,  &  solving  system 
issues  &  participating  in  stages 
of  full  lifecycle  development 
methodologies  using  VB,  Oracle 
&  MSSQL.  Reqs:  Masters  in 
Math,  Finance,  or  Bus.  Admin. 
PLUS  5  yrs.  in  job  or  5  yrs.  as 
Consultant/Research  Analyst 
incl.  3  yrs.  in  energy  industry 
performing  financial  modeling  & 
valuations  &  programming  using 
VB,  Oracle,  &  MSSQL.  Send 
resume  to  KW  North  America 
LLC  c/o  Human  Resources,  601 
Jefferson,  Suite  3750,  Houston, 
TX  77002  Fax:  832-366-1958 


Software  Application  Engineer  to 
program,  install,  configure,  and 
develop  web  based  Human 
Resource/workflow  applications. 
Interface  with  customers.  Duties 
performed  utilizing  Outlook,  SQL 
Server,  Visual  Interdev,  Java 
Script,  ASP  platform.  Knowledge 
of  Ceridian  products  and 
Outlook  required.  Bachelors 
Degree  in  Computer  Engin¬ 
eering  and  one  year  experience 
or  equivalent.  Send  resume  to 
Isarla  Inc.  699  Fall  River  Ave. 
Seekonk,  MA  02747  Fax:  508- 
302-0506 


SW  DESGN  ENGR.  Desgn, 
devlp,  implemnt,  supprt  &  verify 
SW/firmware  for  new  prducts. 
Test,  desgn  &  implemnt  Java 
code  module,  port  srvc  & 
enhance  cntrol  mngr  directory 
based  repository.  Investigate, 
re-factor,  devlp,  test  &  maintn 
Srvc  Cntrol  Mngr  Repository, 
implemnt  Srvc  Cntrol  Mngr 
Repository  on  Linux.  Work  w/ 
custmrs,  team  membrs  & 
SCMgr  Core  Agents  &  Mngr 
teams  in  devlpng  follow-up 
releases.  Work  w /  Common 
Srvcs  team  to  align  both  SCMgr 
&  Sys  Configuratn  Repositories 
along  industry  standard  directo¬ 
ry  based  infrastructure.  Req: 
Master  degr  in  CS,  CE,  EE  or 
rltd  field.  Sal:  $64,8Q0/yr.  Loc: 
Ft.  Collins,  CO.  8am-5pm, 
40hrs/wk.  Application  is  by 
resume  only.  Send  resume  to: 
WORKFORCE  DEVELOP¬ 
MENT  PROGRAMS,  P.O.  BOX 
46547,  DENVER,  CO  80202. 
Ref:  JO#C05059986.  Must  have 
proof  of  leaa!  authority  to  work  in 
U.S. 


CCIE  Technical  Support 
Manger-Post  Sales  -  Manage 
post-sales  technical  support 
activities  of  technical  support 
staff  engaged  in  the  analysis, 
design  and  implementation  of 
solutions  to  engineering  and 
integration  problems  of  complex 
internetworked  systems  based 
in  Cisco  Systems  technologies. 
Bachelor's  degree  or  foreign 
degree  equivalent  in  Computer 
Engineering  or  related  field 
required  and  five  years  of  expe¬ 
rience  in  network  design  engi¬ 
neering  and/or  network  support 
engineering.  Please  forward 
resume  to  Attn:  Mike  Gallimore, 
BellSouth  Communication 
Systems,  2359  Perimeter  Point 
Parkway,  Charlotte,  North 
Carolina  28208.  Please  do  not 
email  or  fax  resumes.  EOE 


SW  DESGN  ENGR.  Provide 
current  prod  engrg  supprt  for 
new  HP  Prducts.  Create  code 
fixes  &  customr  enhancemnts  to 
provide  quality  supprt  for  HP 
customr.  Function  as  an  integral 
part  of  Current  Prduct  Engrg 
Team  for  HP  prducts  &  fix 
defects  in  various  subsys  of  this 
prduct.  Responsible  for  demon- 
stratng  specific  processes 
knowldg  in  area  of  interna! 
implementatn  of  HP  techniques. 
Req:  Bach  degr  or  foreign  degr 
equiv  in  CS,  CE,  EE  or  related 
engrg  field  +  2  yrs  exp  in  job 
offered  or  2  yrs  in  Software 
Engineering  capacity.  Sal: 
$71,280/yr.  Loc:  Ft.  Collins,  CO. 
8am-4pm,  40hrs/wk.  Application 
is  by  resume  only.  Send  resume 
to:  WORKFORCE  DEVELOP¬ 
MENT  PROGRAMS,  P.O.  BOX 
46547,  DENVER,  CO  80202. 
Ref:  J0#c05060015.  Must  have 
proof  of  legal  authority  to  work  in 
U.S. 


Software  Engineer  sought  by 
s/ware  dvlpmt  co.  specializing  in 
airport  computer  systems  dsgn 
for  immediate  opening  at  its 
Englewood,  CO  office.  BS  in 
Comp  Sci  +  5  yrs  exp  in  dsgn  & 
dvlpmt  of  s/ware  systems  for 
secure,  multi-user  large  scale 
applies.  Exp  w/using  Sun  Solaris 
&  h/ware,  SCO  OpenServer, 
Linux,  Oracle  7/9i,  Apache, 
Samba,  Sendmail,  C/C++, 
VC++,  Embedded  VC++,  VJ++, 
PERL,  SQL.  Kom/tc  Shell, 
PVCS  &  configuring  routers/ 
switches/termina!  servers  & 
printers  highly  desirable. 
Forward  resume  to  HR,  Attn  RM, 
InterSystems  USA,  Inc,  6675  S. 
Kenton  St,  #116,  Englewood, 
CO  80111  or  email  to: 
HR@itsden.com 


Konnech,  a  small  telecomm 
firm,  is  looking  for  IT  profession¬ 
al.  Applicants  must  have  CS/EE 
degree.  MCSE  for  Network  and 
MCDBA  for  Database.  Exp.  in 
telecomm,  VoIP,  &  multi-sensor 
integration  preferred.  Please 
send  cover  letter  and  resume  by 
email  to  eyu@konnech.com. 
EOE 

Internet  Operation  Center  (IOC) 
is  looking  for  software/project 
engineers,  system/programmer 
analysts.  Duties  include  quality 
assurance,  use  Oracle,  SQL, 
web  tech,  VB,  DB2,  ASP,  C/C++, 
XML,  Java/Script.  Must  have 
BS/MS  plus  experience.  Please 
apply  at  resume@iocenter.net. 
EOE 


Prog/Analysts  to  analyze, 
design  business/scientific  appls 
using  SAP  R/3,  ABAP,  VB, 
Oracle,  SQL  Server  on  UNIX/ 
Windows  envir;  develop  tech 
design  docs;  determine  reqs; 
perform  monitoring,  quality  con¬ 
trol;  test/troubleshoot  project 
appl  code  according  to  system 
objectives.  Require:  BS  or  for¬ 
eign  equiv.  in  CS/Sd./Engg. 
(any  branch)  &  2  yrs  of  exp.  in 
IT.  Travel  involved.  High 
salaries.  Respond  to:  HR, 
Smartsoft  International,  Inc., 
7900  Steubenville  Pike  Suite  21 , 
Imperial,  PA  15128 


NE  OH  Medical  Devices  seeks 
Senior  Software  Engineer  to 
research,  design  and  develop 
software  algorithms  for  Image- 
Guided  Surgery  system,  manag¬ 
ing  project  for  Image-Guided 
Surgery  system,  applying  princi¬ 
ples  and  techniques  of  computer 
science,  engineering  and  math¬ 
ematical  analysis.  Ph  D.  in 
Computer  Engineering  req.  Must 
have  strong  mathematical  back- 
ground/w  quality  and  regulatory 
requirements  for  medical  prod¬ 
ucts  (FDA,  CE,  ISO),  medical 
imaging/scientific  visualization , 
image  registration,  image  pro¬ 
cessing,  C/C++,  Unix  or  Linux, 
Tcl/Tk.  Resumes  send  to:  3740 
Euclid  Ave.  Cleveland,  OH 
44115.  No  calls.  EOE 


System  Admins  to  install,  main¬ 
tain,  administer  Windows  NT, 
Linux,  HP-UX, SCO/Solaris; 
plan,  maintain,  troubleshoot 
LAN/WAN;  manage  networking 
protocols  TCP/IP,  IPX/SPX,  etc; 
install,  upgrade  network  hard¬ 
ware/software.  Require:  B.S.  or 
foreign  equiv  with  cone  in 
CS/Science/Engg.(Any  branch) 
and  2  yrs  exp  in  IT.  Travel 
involved.  High  salary.  Respond 
to:  HR,  Radiant  Technologies, 
Inc.,  335  Majestic  Cove, 
Alpharetta,  GA  30004. 


SYSTEMS  ADMINISTRATOR- 
Miami,  FL;  sought  by  Global 
Logistics/  Freight  Fwdg  Co. 
Req'd  to  dsgn,  admin  &  maintain 
IT  &  HW  infrastructure  for 
LATAM  region.  Dvlp  IT  sys  & 
d/base  accounting  progs.  Must 
have  4  yrs  exp  in  job  offd  or  4 
yrs  exp  as  Sys  Mgr  or  Sys 
Speclst.  Sys:-S-36;  RS6000, 
Clipper.  Must  have  ability  to 
work  on  a  global  scale  to  con¬ 
duct  installations  in  mainframe  & 
NT  environ.  Send  resume  to:  IT 
Mgr,  Latam,  Panalpina,  Inc., 
3505  NW  107th  Avenue,  Miami, 
FL  33178. 


Software  Engineers:  Software 
life  cycle  development  in 
Microsoft  Development  toois 
suite  including  C#.Net,  Oracle 
RDBMS  tools  suite,  SQL 
Server,  DB2,  COBOL  and 
related  tech,  to  develop  array 
of  apps.  including  secure 
Client  Server/Web  based  HR, 
Communication  and  Govern¬ 
ment  apps.  Complete  job 
description  or  to  apply  contact 
HR,  3761  Venture  Dr.,  Bldg. 
100,  Suite  240,  Duluth,  GA 
30096. 


Jr.  programmer/Ass.  pro¬ 
grammer  Analyst  to  write  & 
maintain  application  prog.  & 
coiiect  data  to  help 
dev/modify  complex  data 
processing  systems,  pre¬ 
pare  specifications.  Req'd: 
B.S  in  comp  sci,  comp  Eng, 
or  Eiect.Eng.  40hr/wk. 
Job/Interview  site:  Milpitas, 
CA.  Send  resume  to  Global 
Finance,  1323  Jacklin  Rd., 
Milpitas,  CA  95035. 


Software  Engineer:  Web/ 
Database  Dvlpr:  work  w/mktg  to 
author  all  aspects  of  complex 
Web  Pages,  incl  scripting, 
graphic  tools,  database,  inter¬ 
face,  storage,  security  &  client 
training.  Guide  architectural 
deployment  of  h/ware,  s/ware, 
3rd  party  components,  &  proto¬ 
cols  using  optimal  comp  lan¬ 
guages  for  client  projects. 
Communicate  w/clients,  incl  pri¬ 
mary  Chinese  mkt.  FT.  MS, 
Comp  Sci  req'd.  Send  resume 
only  (no  calls,  faxes  or  e-mails 
please)  to:  #  YYY,  TOTO 
GROUP,  1001  Avenue  of  the 
Americas,  15th  fir.,  NY,  NY 
10018. 


Programmer-Analyst 
needed  to  plan,  devel¬ 
op,  test  and  document 
computer  programs. 
B.Sc.  computer  science 
reqd.  Fax  resume  to 
Fauzan  Ahmed  @ 
Quantum  Software. 
281-895-6623. 


Computer  Systems  Admin¬ 
istrator.  Analyze/maintain/ 
modify  applications  on  IBM 
mainframe.  Req.  BS  Math/ 
Comp.  Science/Rel.  Field  & 
2  yrs  exp  in  job/2  yrs  exp  as 
Sr.  Analyst/Programmer. 
Spec.  Req.  Expertise  in 
COBOL,  DB2,  CICS,  CSF, 
Cordaptix  &  Utility  Billing 
Systems.  Send  Resume: 
Louie  G.  Abad,  EV3A,  Inc., 
104  Pierpoint  Cir.,  Folsom, 
CA  95630(Jobsite). 
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Software  Engineer  will  be  pri¬ 
marily  responsible  for  the  design 
and  programming  of  health  care 
application  components  in  Java. 
Will  participate  in  team  level 
design  and  review  sessions. 
Will  translate  analysis  level 
specifications  into  implementa¬ 
tion  design  and  working  Java 
code.  Will  document  designs 
using  standard  and  proprietary 
modeling  methodologies,  includ¬ 
ing  UML  and  Entity-Relationship 
modeling.  Will  also  conduct 
and  participate  in  peer  design 
reviews  for  Java,  JSP,  and  EJB 
code  and  algorithms  as  well  as 
use  project  standard  tools  and 
infrastructure  such  as  source 
code  control  system,  bug  track¬ 
ing  software,  and  newsgroups. 
Will  write  infrastructure  layer 
modules  for  application  server 
side  debugging,  testing  and 
application  resources  manage¬ 
ment.  Will  design  elements  of 
system  web  presentation  layer 
model.  Will  write  unit  and  inte¬ 
gration  test  code  for  all  assigned 
components  where  appropriate. 
Will  maintain  code  and  imple¬ 
ment  bug  fixes  for  all  assigned 
areas  of  responsibility.  Req¬ 
uires  Bachelor  of  Science  or 
equivalent  in  Computer  Science, 
Engineering,  Electronics,  Math¬ 
ematics,  or  Physics  and  five  (5) 
years  in  job  offered  OR  five  (5) 
years  experience  developing 
enterprise-scale  distributed 
applications.  Candidate  must 
also  possess  demonstrated 
expertise  developing  enterprise 
scale  applications  in  Java  and 
C/C++  for  Unix  and  Windows 
operating  systems;  demonstrat¬ 
ed  expertise  developing  J2EE 
applications  for  WebLogic  appli¬ 
cation  server;  and  demonstrated 
expertise  developing  JSP  and 
Swing  presentation  layer  appli¬ 
cations.  Salary:  $90,500/yr, 
M-F,  9AM-5PM.  Send  2 
resumes  to  Case  #200202827, 
Labor  Exchange  Office,  19 
Staniford  St.,  1st  fl.,  Boston. 
MA  02114.  EOE.  Applicants 
must  be  workers  eligible  to 
accept  full-time  employment  in 
U.S. 


Software  Eng.  to  design,  code, 
implement  client/server,  distrib¬ 
uted  middleware  applications 
using  distributed  technology, 
object  oriented  program.  Tech., 
Java,  Java  File  I/O,  Servlets, 
JSP,  EJB,  JDBC,  CORBA,  SQL, 
PL/SQL,  HTML,  XML,  Shell 
prog.,  Oracle  9i  (RDBMS), 
Weblogic  Server  (WLS)  6.1,  7, 
JBuilder  IDE  7.0,  Orbix  2000, 
Visio,  Harvest  CCC,  TOAD, 
Syncsort,  Connect  Direct, 
JProbe  5.0  on  Windows  NT  and 
UNIX  (Sun  Solaris)  OS.  Comp, 
salary  in  Compliance  with 
Prevailing  Wages.  MS  in  Comp. 
Applns.  or  CS  or  equivalent  +  2 
yrs.  exp.  In  duties.  Comp, 
salary.  Apply:  Netserv  6580 
Jimmy  Carter  Blvd,  Norcross, 
GA  30071  with  proof  of  perm, 
work  auth. 


Computers-Software 
Engineers  needed.  Break¬ 
through  Management  Group, 
Inc.,  based  in  Longmont,  CO 
is  seeking  qual.  candidates 
possessing  BS  or  equiv. 
and/or  re!,  work  exp.  Part  of 
the  req.  rel.  exp.  must  include 
3  yrs.  working  with  Java, 
servlets  &  JSP.  Duties 
include:  Work  with  3  of  the  fol¬ 
lowing:  Java,  servlets,  JSP, 
XML/XSL,  Oracle,  SQL 
Server.  Fwd.  resume  &  ref. 
via  email  to: 

ITemployment@BMGi.com 


ONE  Network  Enterprise  (ONE), 
Inc.,  a  leader  in  transportation 
logistics  software  solutions,  is 
looking  for  IT  professionals  with 
BS  comp  sci  or  related  &  2-3  yr 
exp  in  integration  &  application 
development  to  join  our 
Charlotte,  NC  location  to 
enhance  our  hosted  transporta¬ 
tion  application  running  in  web- 
based  J2EE  environ.  Resumes 
to:  G.  Jones,  8500  Freeport 
Pkwy,  South  Suite  110  Irving  TX 
75063 

Software  Engineers.  Exp 
w/J2EE  solution  develop  using 
OOAD  techniques.  Translate 
transpo  execution  bus  req.  to 
low  level  software  programs 
using  Java/J2EE/JSP/EJBs.  Sr 
Engineers.  Design,  develop,  & 
debug  features  to  support  ONE 
net-native  internet  business  ser¬ 
vices  for  multi-enterprise 
processes  using  J Boss-Tomcat 
app  server,  Ant,  Perforce,  PVCS 
Tracker,  PLSQL.  Exp  with 
Java/J2EE.  arch/EJB/JDBC/ 
Oracle,  JNDI,  RMI,  Beans  & 
Web  Tech  including  JSPs, 
Struts,  Framework,  Velocity, 
Tiles,  XML.  Sr  Integration 
Developers.  Design,  develop,  & 
debug  integrations  between  cus¬ 
tomer  systems  &  ONE  hosted 
transpo  apps.  Exp  analyzing  bus 
requirements,  developing  specs 
for  data  integration  solutions,  & 
designing  &  implementing  bi¬ 
directional  integrations  between 
EDI  &  Propriety  data  format  & 
XML  formats  using  Java/XML/ 
XSL  on  Sun  Solaris  platform. 


PLM  Consultant 

Dassault  Systemes  Services.  LLC 
is  dedicated  to  helping  its  cus¬ 
tomers  realize  the  benefits  of  3D 
product  lifecycle  management 
(PLM)  solutions. 

We  are  looking  for  consultants  to 
analyze  our  manufacturing  clients 
needs  and  configure  solutions 
using  the  Dassault  Systemes  fam¬ 
ily  of  PLM  software.  Consultants 
will  work  on  site  at  customer's 
locations  and  will  be  required  to 
travel  throughout  the  United 
States  60%  of  the  time.;  imple¬ 
ment  PLM  software;  and  provide 
technical  support.  These  posi¬ 
tions  require  a  Bachelor’s  degree 
in  Mechanical  Engineering  or  a 
closely  related  field  and  experi¬ 
ence  with  PLM  software. 

Dassault  Systemes  Services,  LLC 
promotes  a  work  environment  that 
focuses  on  integrity,  teamwork 
and  fun.  If  you  qualify,  please 
send  your  resume  indicating  the 
position  of  interest  to:  Dassault 
Systemes  Services,  LLC,  10926 
David  Taylor  Drive,  Suite  300, 
Charlotte,  NC  28262  or  cv@ds- 
ca.com.  Reference  #:  2151. 
Please  indicate  the  reference 
number  on  your  resume. 

We  are  an  equal  opportunity 
employer. 


Softcon  USA  inc  a  fast  Growing 
software  firm  is  looking  for 
the  following  with  bachelor's 
degree  in  computer  science/ 
related  field. 

Computer  consultants:  3  plus 
years  experience  in  Design 
development  and  Test  in 
UNIX,  Linux,  Windows 
NT/2000/,  Java  Technologies, 
PeopleSoft,  Oracle/Applications, 
Data  Warehouse,  Siebel,  SAP, 
.Net,  EAI,  SQL  Server, 
Webmethods,  WinRunner, 
LoadRunner,  TestDirector,  SQA 
and  Rational  Rose. 

We  accept  foreign  education 
equivalent  of  the  degree,  or 
the  degree  equivalent  in  edu¬ 
cation  and  experience. 

Send  resume  and  covering  letter 
to:  2604  E.  Dempster  St,  suite 
209,  Park  Ridge,  IL  60068, 
e-mail  jobs@softcon-us.com 


Business  Systems  Development 
Manager.  Will  be  responsible  for 
development,  deployment  and 
support  of  core  business  sys¬ 
tems,  with  particular  emphasis 
on  Glovia.  Will  participate  in 
departmental  management  and 
organizational  development.  Will 
plan  IT  technology  strategy 
development  and  implementa¬ 
tion.  Will  work  closely  with  busi¬ 
ness  managers  to  understand 
business  strategy  and  business 
drivers.  Will  manage  information 
systems  projects,  including  ven¬ 
dor  and  user  relationships.  Will 
develop  and  maintain  defined 
work  processes  and  procedures. 
Will  maintain  delivery  focus  and 
be  attentive  to  development 
schedules.  Requirements:  B.S. 
in  CS,  IT,  MIS,  or  related  field 
and  two  (2)  years  of  experience 
in  the  job  offered  or  two  (2) 
years  experience  in  the  related 
occupation  of  IT  or  Systems 
Project  Management  OR  in  the 
alternative  will  accept  four  (4) 
years  of  work  experience  in 
Information  Technology  two  of 
which  must  be  in  the  role  as  an 
IT  or  Systems  Project  Manager. 
Also,  demonstrated  experience 
in  the  following:  (1)  Managing 
business  development  projects; 
(2)  Working  on  systems  archi¬ 
tecture  and  software  process 
development  as  well  as  pack¬ 
aged  system  deployment  pro¬ 
jects;  (3)  Working  with  supply 
chain  management  systems, 
such  as  MRP,  engineering  sys¬ 
tems,  sourcing  &  procurement 
systems;  and  (4)  Glovia  ERP 
Offered  salary  is  $80,000/year 
for  full-time  employment  (min. 
40  hours  per  week)  and  stan¬ 
dard  company  benefits.  EEO. 
Submit  2  resumes  and  respond 
to  Case  No.  2002-03222,  Labor 
Exchange  Office,  19  Staniford 
Street,  1st  Floor.  Boston,  MA 
02114. 


Software  Engineer:  For  co.  spe¬ 
cializing  in  mktg  &  manufactur¬ 
ing  of  computer  software, 
design,  code,  implement  &  test 
complex  product  enhance¬ 
ments.  Research  new  feature's 
concepts  &  establish  plans  & 
coordinate  them;  analyze  prob¬ 
lems  &  suggest  innovative  solu¬ 
tions;  design  &  test  plans;  train  & 
review  design  work  of  program¬ 
mers.  Req's:  B.S.  Degree,  or 
equivalent,  in  Computer 
Science,  Electronics  Engin¬ 
eering  or  a  related  field.  4  yrs 
exp  in  job  offered  or  4  yrs  of  pro¬ 
gramming  exp.  Exp  must 
include  design,  analysis,  trou¬ 
bleshooting,  testing  &  support. 
Prof,  in  Visual  Basic,  SQL 
Server,  Object-oriented,  Oracle, 
Java,  IBM  main  frame, 
Medicare/Medicaid,  EDI  XI 2 
(HIPAA  Transactions  -  270,  271, 
276,  277,  834,  835  &  837), 
COBOL  II,  OS/390,  DB2,  MS, 
JCL,  VSAM,  SPUFI,  QMF,  FILE- 
AID,  MQSeries,  CICS,  EDI- 
GENTRAN.  CA-7,  CA-11, 

ENDEAVOR,  IBM  utilities  & 
PLATINUM  (CA)  tools  for  DB2. 
40hrs/wk..  Send  res.  to  S-1 ,  P.O. 
Box  17182,  Phila.,  PA  19105. 


Computer  Programmer  sought 
by  dental  care  organization  in 
Philadelphia,  PA  to  design, 
develop  and  implement  intranet/ 
internet  applications  and  system 
software  for  claim  submission 
and  management.  Must  have 
Bach  in  Comp  Sci.,  Engg  or 
equiv  and  one  yr  exp  using 
Visual  basic,  Oracle,  SQL 
Server,  COM,  ASP,  VSS,  Java, 
Javascript,  VBScript,  HTML, 
Adobe  Photoshop,  Macromedia 
Dreamweaver,  Flash,  Astra 
Load  Runner  and  Winrunner. 
Respond  to:  HR  dept.,  A-1 
Family  Dental  Care,  PC.,  8539 
Bustieton  Avenue,  Philadelphia, 
PA  19152. 


IT  PROFESSIONALS: 

POSITION:  Network  Product 
Engineer  (Glen  Mills,  PA  and 
other  locations  throughout  the 
United  States) 

Responsible  for  assessing  exist¬ 
ing  data  networking  and 
telecommunication  infrastruc¬ 
ture,  utilizing  extensive  experi¬ 
ence  in  Voice  and  Data 
Communication  architectures 
utilizing  Cisco  and  other  net¬ 
working  equipment  vendors. 
Responsible  for  defining  a  for¬ 
ward-looking  data  networking 
and  telecommunication  strategy 
to  encompass  voice  and  data 
communications,  utilizing  expe¬ 
rience  with  WAN  (Wide  Area 
Network)  strategy  development. 
Apply  CCNA  (Cisco  Certified 
Network  Associate)  certification 
to  install,  configure,  develop  and 
operate  Voice  and  Data  net¬ 
working  technologies  such  as 
LAN  (Local  Area  Network) 
Switching,  WAN  Routing,  Circuit 
Provisioning,  QOS,  IP  Soft- 
Switches,  Security,  Wireless, 
ATM  Frame  Relay  and  MPLS 
(Multi  Protocol  Label  Switching), 
Voice  Over  IP,  and  IP-VPN 
(Virtual  Private  Network).  Assist 
with  procurement  and  sourcing 
of  data  networking  and  telecom¬ 
munication  services  by  interfac¬ 
ing  with  equipment  vendors  and 
carriers  utilizing  experience  in 
network  procurement  and  deal¬ 
ing  with  both  equipment 
providers  as  well  as  network 
service  providers  from  a  sourc¬ 
ing  perspective.  Develop  train¬ 
ing  materials  and  detailed  docu¬ 
mentation  for  knowledge  trans¬ 
fer  to  appropriate  operations 
personnel.  The  wage  offered  is 
$84, 660/year.  The  work  sched¬ 
ule  is  Monday-Friday  9:00am- 
5:00pm.  The  minimum  require¬ 
ments  are  as  follows:  Bachelor's 
degree  in  Comp  Science, 
Electrical  Engineering,  Tele¬ 
communications.  Mathematics, 
Information  Technology,  Bus¬ 
iness  Administration  +  3  years 
experience  in  the  job  offered  or 
3  years  experience  as  a 
Network  Product  Engineer. 
Related  experience  must  also 
include  Certification  of  CCNA 
(Cisco  Certified  Network 
Associate),  Switching  Fund¬ 
amentals,  TCP/IP,  Routing 
Basics,  WAN  Technologies, 
Wireless  Technology,  Operating 
and  Configuring  Cisco  IOS 
Devices 

Please  send  your  resume,  refer¬ 
encing  Job  Order  Number 
WEB367014  to  the: 

PA  Dept.  L  &  I 

235  Chelten  Avenue 

Philadelphia,  PA  19144 


Database  Administrator  At 
Quest  Diagnostics  Inc.,  we've 
become  the  nation's  most 
respected  name  in  diagnostic 
testing  by  focusing  on  integrity, 
innovation  and  quality.  We've 
created  an  environment  where 
dedicated  professionals  can 
learn,  grow  and  advance  -  all  in 
an  atmosphere  of  pride.  We're 
currently  seeking  a  Database 
Administrator  to  be  based  in 
Lyndhurst,  NJ.  Candidate  will 
install  and  maintain  Oracle  8i/9i 
database  and  SQL  Server  data¬ 
base;  support  Oracle  databases 
providing  services  to  company 
users;  assure  data  integrity  and 
security;  perform  SQL  Server 
administration;  and  monitor, 
upgrade,  and  maintain  UNIX 
servers.  Requirements:  Bach¬ 
elor’s  degree  in  Computer 
Science,  Electronics,  Engin¬ 
eering  or  related  field;  5  years 
experience  including  implemen¬ 
tation;  maintenance,  and  sup¬ 
port  programming  of  Oracle 
databases,  systems  administra¬ 
tion  of  UNIX  servers  running 
Oracle  applications,  and  SQL 
Server  database  administration. 
EOE/M/F/D/V.  Please  add 
source  code:  DBA1017  and  for¬ 
ward  your  resume  to: 
Email:questdiag@alexus.com; 
Fax  877-588-9942  or  mail  to 
Quest  Diagnostics  Incorporated, 
P.O.  Box  3597,  Scranton,  PA 
18505. 
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The  MathWorks 


The  MathWorks  leads  the  market  in  developing  and 
delivering  high  performance  interactive  software 
products  such  as  MATLAB®  to  the  engineering 
and  scientific  communities.  We're  increasing  our 
lead  by  hiring  the  best  people  for  every  job  in  the 
organization.  We  have  the  following  positions 
available  at  our  offices  in  Natick,  MA: 

Embedded  Tools  Developer 

Develop  the  core  of  the  company's  automatic  C  code 
generation  products  for  embedded  real-time  systems 
for  the  Real-Time  Workshop  software  suite. 

DSP  Simulink  Blockset  Engineer 

Engage  in  DSP  algorithm  development  for  audio 
and  telephony  application  areas.  Write  floating¬ 
point  and  fine-point  algorithms  in  C++  and 
MATLAB  to  be  implemented  to  support  both 
simulation  and  embedded  code  generation  for 
programmable  and  custom  hardware  targets. 

GUI  Component  Engineer 

Responsible  for  component  architecture,  user 
interface  design.  JAVA  component  construction, 
user  visible  API  definition,  and  default  properties 
definition  of  the  Company's  Graphical  User 
Interface  components. 

DSP  Software  Engineer 

Research,  propose,  plan,  and  implement  graphical 
user  interfaces  (GUI)  for  spectral  analysis,  filter 
analysis  and  design,  and  other  general  digital 
signal  processing  (DSP)  operations. 

Product  Developer 

Responsible  for  the  development  of  code  generation 
products  for  automatic  control  systems.  Will  be 
primarily  responsible  for  Data  Management, 
Graphical  User  Interfaces  (GUI)  and  new  features. 

The  aforementioned  positions  are  available  at 
all  levels  and  require  a  minimum  of  a  B.S., 
M.S.,  or  Ph.D.  and  0-8  years’  experience. 

Additional  Opportunities  in  the  Following  Areas: 

•  Senior  Installer  Engineer 

•  Senior  Manager,  Comp,  Benefits,  &  HRIS 

•  GUI  Developer 

•  MATLAB-  Senior  Software  Engineer 

•  Siebel  Analyst 

•  Business  Intelligence  Analyst 

For  fastest  consideration  interested 
candidates  should  reply  via  our  website: 
http://www.mathworks.com/jobs 
Attn:  Human  Resources  -  Job  Code:  CW1003, 
The  MathWorks,  Three  Apple  Hill  Drive, 

Natick,  MA  01760-2098. 

We  are  an  equal  opportunity  employer. 


www.mathworks.com 


Systems  Analyst  (Financial). 
Work  sites  vary.  System  analy¬ 
sis,  design,  configuration  finan¬ 
cial  software  full  life  cycle  imple¬ 
mentation  in  SAP  SEM  BPS. 
Customize  transactional  Info- 
Cube  for  SEM  BPS  simulation 
model,  Planning  Strategies  / 
Packages  /  Applications. 
Perform  Data  Extracting  from 
LIS/LO  data  extraction,  OLTP, 
legacy  system,  standards  R/3 
tables  and  Flat  files. 
Customizing  /  enhancing  Data 
Sources.  Create  and  configure 
InfoSource,  InfoObjects,  Info- 
Cubes  (BasicCube,  MultiCube  & 
Remote  Cube),  ODS.  Data 
modeling  and  end-to-end  cube 
development  w/SAP  BW 
objects.  Design  and  develop 
Reports  and  Queries  w/BEx 
Analyzer,  BEx  Explorer. 
Collection  of  business  metrics 
and  extraction  of  KPI/Project 
/Client  Mgmt.  Implement  ERP 
Solutions.  B.S.  in  Econ., 
Financial  Operations  Mgmt,  Info. 
Systems,  or  similar  +  1  yr  exp. 
SAP  R/3  -  SEM  and  SAP  R/3  - 
BW.  Travel  req'd.  Work  sites 
vary.  $68,000yr.  Must  have 
perm  work  auth.  to  work  in  U.S. 
Refer  to  job  order  #web  368354 
Send  resume  to  McKeesport 
Career  Link,  ATTN:  ES 
Manager,  345  5th  Ave., 
McKeesport,  PA  15132-2600. 


E-Learning  Portal  Development 
Manager:  Manage  the  design, 
development,  implementation 
and  support  of  video-centric,  e- 
learning  portal  projects  utilizing 
in-depth  familiarity  with  video- 
on-demand  edge  server  net¬ 
works,  e-learning  systems 
including  Learning  Management 
Systems  and  Computer  Based 
Training  systems,  portal  frame¬ 
works  integrated  with  corporate 
application  such  as  e-mail  and 
Instant  Messaging,  and  syndi¬ 
cated  content  including  News, 
Weather,  Stocks.  Lead  large- 
scale  Java  development  teams 
and  provide  technical  guidance 
using  development  tools  includ¬ 
ing  CVS  version  control  sys¬ 
tems,  IDEs,  compilation  and 
stress  testing  tools,  and  bug 
tracking  software,  for  Apache, 
IIS,  TomCat  and  WebLogic  sys¬ 
tems,  and  Oracle  and  SQL  data¬ 
bases.  Draft  Engineering  Pro¬ 
posals,  Requirement  Specifica¬ 
tions,  Design  Documents  and 
Test  Plans  to  IEEE  and  IS09000 
standards.  Must  have  a  B.Sc.  of 
Computer  Science  or  foreign 
equivalent  and  at  least  8  years 
of  progressive  web-based  soft¬ 
ware  engineering  experience, 
including  at  least  1  year 
Learning  Management  Systems 
development  experience  with 
AICC  and  SCORM  standards. 
Must  be  willing  to  travel  as  tech¬ 
nical  consultant  to  client  sites  M - 
F.  Apply  to:  Ms.  Cynthia  Burton, 
Convergent  Media  Systems 
Corp.,  3490  Piedmont  Road, 
Suite  800,  Atlanta,  GA  30305 
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SOFTWARE  ENGINEER: 
Design,  development,  enhance¬ 
ment,  testing  &  support  of  lega¬ 
cy  systems  by  providing  guid¬ 
ance  and  system  support  based 
on  customer  needs  and  techni¬ 
cal  feasibility.  Work  performed 
using  MS  Projects,  VISIO,  MS 
Office  applications,  Lotus 
Notices,  COBOL  (Common 
Business  Oriented  Language), 
CICS  (Customer  Information 
Control  System),  DB2 
(Database  2),  VSAM  (File  Aid, 
Virtual  Sequential  Access 
Method),  Interest;  Changeman; 
Changesolve  and  Omegamon. 
Implementing  web  applications 
using  Weblogic  5.3,  Oracle,  SQL 
(Structured  Query  Language)  in 
UNIX  environment.  Must  be 
willing  to  travel  temporarily  to 
client  sites  throughout  the  U.S. 
with  expenses  paid  by  employer. 
Exp.  to  include  design,  develop¬ 
ment,  implementation  &  mainte¬ 
nance  of  software  applications 
performed  using  MS  Projects, 
VISIO,  MS  Office  applications, 
Lotus  Notices,  COBOL,  CICS, 
DB2,  VSAM  Interest; 
Changeman;  Changesolve;  and 
Omegamon.  Weblogic  5.3, 
Oracle,  SQL  in  UNIX  environ¬ 
ment. 

Bachelors  degree  or  foreign 
equiv.  In  Comp.  Sci.,  Maths  or 
Engineering  (any  branch),  1  yr 
exp  in  job  offered  or  1  yr  in  relat¬ 
ed  occup,  work  as  above  but 
designated  by  another  title  is 
acceptable.  Salary: 

$85,595.1 2/year.  Hrs  of  work: 
40  per  week.  Job  and  interview 
site:  Boston,  MA.  Send  this  ad 
and  two  (2)  copies  of  your 
resume  to:  Case  #200202905 
Labor  Exchange  Ofc,  19 
Staniford  St.,  1st  FI.,  Boston,  MA 
02114. 


Internet  Developer  (Boston,  MA) 
to  design,  develop  &  manage 
internet/intranet  applications, 
infrastructure  &  security. 
Troubleshoot  &  debug  software 
code  &  monitor  servers,  applica¬ 
tion  performance  &  user  acces¬ 
sibility.  Develop  enhancements 
to  pre-existing  applications.  Will 
utilize  Java,  HTML  and  web- 
based  languages.  Require¬ 
ments:  bachelor's  or  equivalent 
in  computer  science  or  a  related 
field;  4  years  experience  in  the 
job  offered  or  4  years  in  systems 
analyst  or  related  positions;  and 
background  in  Java,  HTML  and 
web-based  languages  including 
experience  using  Java,  JDBC, 
JNDI,  Javascript,  UNIX,  Java- 
Web  Server,  HTML,  PL/  SQL  & 
SQL.  Oracle  and  related  tools  to 
develop  web-based  applica¬ 
tions.  Must  have  unrestricted 
authorization  to  work  in  U.S.  M- 
F.  9:00  AM  -  5:00  PM,  40+  hrs/ 
week  Salary:  $95,000/yr.  Send 
two  copies  of  resume  to  Case 
#200115039,  Labor  Exchange 
Office,  19  Staniford  Street,  1st 
Floor,  Boston,  MA  02114.  An 
EOE. 


ValleyUS,  Inc.  seeks  Prof¬ 
essionals  with  multiple  open¬ 
ings  at  Cupertino,  CA  /  Sioux, 
SD  /  Wilmington,  DE /  Chicago, 
I U Austin,  TX  and  other  project 
sites  through  out  USA  for  the  fol¬ 
lowing  position: 

-  Software  Engineer 

-  Programmer  analysts 

-  Project  Manager 

-  Management  Analyst 

Salary  will  be  commensurate 
with  education  and  experience. 
All  positions  involve  travel  or 
relocating  to  various  client  sites 
through  out  USA.  Apply  with 
your  resume  to: 

Valley  US  Inc. 

H  R  Executive 

10062  Miller  Avenue.  #270, 

Cupertino,  CA  95014 

Please  indicate  the  location  and 
position  you  are  applying  for. 


Software  Test  Engineer  (Fort 
Worth,  TX).  Bachelor's  degree 
(or  equiv.  foreign  educ.)  in  com¬ 
puter  science,  info.  tech,  or 
mathematics  &  6  yrs.'  exp.  in  the 
job  offered  or  6  yrs.'  exp.  con¬ 
ceptualizing,  writing  &  imple¬ 
menting  software  test  methodol¬ 
ogy  &  the  direct  use  of  software 
test  tools,  both  of  which  comply 
with  regulated  industry  stan¬ 
dards.  [In  lieu  of  Bachelor's 
degree,  will  accept  2  yrs.  of  uni¬ 
versity  study  in  comp,  sci.,  info, 
tech,  or  mathematics  &  2  add'l 
yrs.  of  exp.  as  stated.)  Stated 
exp.  must  include  working  with 
the  entire  information  systems 
test  life  cycle*  and  hands  on 
testing  of  multi-tier  information 
systems.  Must  also  have  1  yr.'s 
exp.  managing  multi-tier  infor¬ 
mation  systems  projects. 
Conceptualize,  write  and  imple¬ 
ment  software  test  methodology 
&  use  software  test  tools  to 
ensure  reduction  of  business  & 
technical  costs  &  correlation  with 
corporate  standards  for  risk- 
based  compliance.  Work  on 
entire  information  systems  test 
life  cycle*  (test  planning,  con¬ 
duct,  analysis,  documentation,  & 
reporting,  &  corrective  action 
tracking  and  re-testing). 
40hrs./wk.  8:00  a.m.-5:00  p.m. 
Apply  with  resume  to:  Sylvia 
Cruz,  Alcon  Laboratories,  Inc., 
6201  S.  Freeway,  Mailstop  IL- 
20,  Fort  Worth,  TX  76134.  EOE 


Software  Engineer.  Three  open¬ 
ings.  Develop  software  follow¬ 
ing  RUP  methodology;  con¬ 
tribute  to  ongoing  design  efforts 
with  recommendations  to  the 
product  development  on  area  of 
expertise;  work  with  other  team 
members  and  Project  Leads  to 
ensure  smooth  integration  and 
product  releases.  Must  have 
Bachelor's  degree  in  Computer 
Science  or  related  field,  one 
year  experience,  and  experi¬ 
ence  must  include  working  with 
multiple  database  platforms, 
Rational  Rose,  Java  and  related 
technologies  including  J2EE, 
JNDI,  JMS,  JAAS,  and  utilizing 
JUnit  with  iterative  development. 
Must  have  implementation 
knowledge  of  multiple  applica¬ 
tion  servers  such  as  WebLogic, 
WebSphere  or  Tomcat.  Send 
resume  w/  cover  letter  to  Praxis 
Technology  Group,  LLC,  Attn: 
Darcy  Bedford,  1500  NW  118th 
St.,  Des  Moines,  I A  50325. 


Keytone  Technologies 
Inc.  is  hiring  a  VP  of 
Delivery/Engineering. 
Send  resumes  to  3140 
De  La  Cruz  Blvd,  Suite 
200,  Santa  Clara,  CA 
95054.  Travel  req¬ 
uired. 


IT  professionals  needed  for 
analysis  and  design  of  systems 
solutions  across  multiple  techni¬ 
cal  and  business  environments 
for  leading  insurance  company 
based  in  Chattanooga,  TN. 
Requires  2  years  experience 
involving  SQL  Server,  ASP, 
Crystal  Reports.  Visual  Basic, 
and  COM+.  All  positions  req. 
BA/BS  and  2  yrs.  exp.  in  field. 
EOE.  Send  resumes  to  Ms. 
Lois  Judge,  Sr.  Recruiter,  at 
UnumProvident,  2211  Congress 
St.  Q291,  Portland  ME  04122. 
Include  Ref.  #2015602. 


SENIOR  SOFTWARE  ENGI¬ 
NEER  to  design,  develop,  test, 
implement  and  maintain  appli¬ 
cation  software  using  C#.NET, 
ASP.NET,  BizTalk  Xiang,  XML, 
HTML,  DHTML,  COM/DCOM, 
JavaScript,  ActiveX  Controls, 
Visual  C++,  SQL  Server,  MS 
Project,  MS  Visic  and  Mercury 
Interactive  Test  Director  under 
UNIX  and  Windows  operating 
systems;  Mentor  junior  engi¬ 
neers  and  programmers. 
Require:  B.S.  degree  in  Comp¬ 
uter  Science,  an  Engineering 
discipline,  or  a  closely  related 
field  with  5  yrs  of  progressively 
responsible  exp.  in  the  job 
offered  or  as  a  Programmer/ 
Analyst  or  Programmer. 
Extensive  travel  on  assignment 
to  various  client  sites  within  the 
U.S.  is  required.  Competitive 
salary  offered.  Send  resume  to: 
Edward  Mojewski  Rd.,  Softech 
Development,  Inc.,  3057  Lorna 
Road,  Ste.,  108,  Hoover,  AL 
35216;  Attn:  Job  RT. 


Internet  Developer  (Boston,  MA) 
to  design,  develop  &  manage 
internet/intranet  applications, 
infrastructure  &  security. 

Troubleshoot  &  debug  software 
code  &  monitor  servers,  applica¬ 
tion  performance  &  user  acces¬ 
sibility.  Develop  enhancements 
to  pre-existing  applications.  Will 
utilize  Java,  HTML  and  web- 

based  languages.  Require¬ 

ments:  bachelor's  or  equivalent 
in  computer  science  or  a  related 
field;  4  years  experience  in  the 
job  offered  or  4  years  in  systems 
analyst  or  related  positions;  and 
background  in  Java  and  web- 
based  languages  including 

experience  developing  web- 
based  applications  with  Java 
and  related  tools  such  as  Corba, 
Oracle,  UML  (Rational  Rose) 
and  DB2,  WebSphere  applica¬ 
tion  server  and  IBM  and  IPIanet 
web  server.  Must  have  unre¬ 
stricted  authorization  to  work  in 
U.S.  M-F,  9:00AM-5:00PM,  40+ 
hrs/week.  Salary:  $110,000/yr. 
Send  two  copies  of  resume  to 
Case  #200115037,  Labor 
Exchange  Office,  19  Staniford 
Street,  1st  Floor,  Boston,  MA 
02114.  An  EOE. 


Internet  Developer  (Boston,  MA) 
to  design,  develop  &  manage 
internet/intranet  applications, 
infrastructure  &  security. 
Troubleshoot  &  debug  software 
code  &  monitor  servers,  applica¬ 
tion  performance  &  user  acces¬ 
sibility.  Develop  enhancements 
to  pre-existing  applications.  Will 
utilize  Java,  HTML  and  web- 
based  languages.  Require¬ 
ments:  bachelor's  or  equivalent 
in  computer  science  or  a  related 
field;  4  years  experience  in  the 
job  or  4  years  in  systems  analyst 
or  related  positions;  background 
in  Java,  HTML  and  web-based 
languages  including  cross  plat¬ 
form  (UNIX  and  Windows)  expe¬ 
rience  developing  web-based 
applications  with  Java  and  relat¬ 
ed  tools,  C,  C++,  XML,  Rational 
Rose,  MS-SQL  and  Corba. 
Must  have  unrestricted  autho¬ 
rization  to  work  in  U.S.  M-F, 
9:00  AM  -  5:00  PM,  40+  hrs / 
week.  Salary:  $120,000/yr. 
Send  two  copies  of  resume  to 
Case  #200115036,  Labor 
Exchange  Office,  19  Staniford 
Street,  1st  Floor,  Boston,  MA 
02114.  An  EOE. 


Computer  Information  Tech¬ 
nology  (IT)  Services  Manager  - 
To  provide  expertise  to  our 
clients  in  Mac  OS  X  and 
FreeBSD  Unix,  including  XML, 
Perl,  PHP  languages  and 
emerging  new  media  and  IP 
technologies.  Send  resume  to 
Executive  International,  REF: 
CIT,  P  O  Box  1437,  Thousand 
Oaks,  CA  91358 


Software  engineer  to  design, 
develop  and  implement  Wide 
Data  Warehouse  and  EIS  appli¬ 
cations  using  SAS  tools  on  Unix, 
Linux  and  NT  platforms. 
Design  logical  data  ware¬ 
house/data  mart  model  and 
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Big  IT  Cost  Reductions  Likely  in 
Bank  of  America  Acquisition  Deal 

Analysts  expect  IT  workforce  layoffs 


BY  THOMAS  HOFFMAN 

Bank  of  America  Corp.  and 
FleetBoston  Financial  Corp. 
said  they  will  try  to  minimize 
layoffs  as  part  of  the  merger 
deal  the  two  companies  an¬ 
nounced  last  week.  But  ana¬ 
lysts  say  it  will  be  nearly  im¬ 
possible  for  the  banks  to  hit  a 
$1.1  billion  annual  cost  savings 
target  without  significant  cut¬ 
backs  in  areas  such  as  IT. 

Even  if  IT  staffing  cuts  are 
kept  to  a  minimum,  reductions 
in  technology  expenditures  are 
expected  to  play  a  big  part  in 
the  cost-savings  effort.  During 
a  conference  call  with  analysts, 
Bank  of  America  executives  in¬ 
cluded  consolidation  of  redun¬ 
dant  systems  and  software  li¬ 
censes  among  steps  they  plan 
to  take  to  make  the  combined 
bank  more  efficient,  said  Jim 
Eckenrode,  an  analyst  at  Tow- 
erGroup  in  Needham,  Mass. 

But  Eckenrode  said  he  be¬ 
lieves  that  layoffs  are  almost 
inevitable  in  administrative 
and  back-office  functions,  in¬ 
cluding  IT.  “They’re  not  going 
to  take  a  billion  dollars  out  of 
the  organization  without  re¬ 
ducing  head  count,”  he  said. 

“We  understand  what  they 
have  to  say  for  political  rea¬ 
sons,”  said  Gerard  Cassidy,  an 
analyst  at  RBC  Capital  Mar¬ 
kets,  a  New  York-based  invest¬ 
ment  bank.  But  the  No.  1  oper¬ 
ating  cost  for  banks  is  person¬ 
nel,  Cassidy  noted. 

The  total  number  of  jobs  at 
the  two  companies  might  not 
change  much  because  of  a  pre¬ 
viously  disclosed  plan  by  Bank 
of  America  to  add  about  550 
branches  nationwide  over  the 
next  three  years,  Cassidy  said. 
But  he  added  that  once  the  op¬ 
erations  of  the  banks  are  fully 
integrated,  “they’ll  certainly 
have  redundancies  in  informa¬ 
tion  management.” 


Bank  of  America,  which  is 
already  the  second-largest 
bank  in  the  U.S.,  plans  to  buy 
Boston-based  FleetBoston  in  a 
stock-swap  deal  valued  at 
about  $43  billion.  A  spokes¬ 
woman  for  Charlotte,  N.C.- 
based  Bank  of  America  said 
it’s  too  soon  to  say  what  im¬ 
pact  the  planned  merger  will 
have  on  different  types  of  po¬ 
sitions  at  the  companies. 

The  spokeswoman  added 
that  bank  executives  should  be 
closer  to  laying  out  a  technolo¬ 
gy  integration  road  map  when 
the  merger  nears  its  scheduled 


Continued  from  page  1 

Life-cycle  Tools 

What  Medeiros  really  needs 
is  wider  interoperability  be¬ 
tween  rival  products  to  make  a 
planned  storage  management 
consolidation  project  possible. 
Medeiros,  who  manages 
300TB  of  storage  capacity  at  a 
data  center  in  New  Jersey,  said 
he  wants  to  tie  in  an  additional 
400TB  that’s  spread  among 

Tech  Plans 

EMC  said  that  during  next 
year’s  first  quarter,  it  will  intro¬ 
duce  software  that  can  be  used  to 
tie  database  applications  into  the 
data  backup  process. 

HITACHI  DATA  SYSTEMS  an¬ 
nounced  a  deal  to  resell  ApplQ 
Inc.’s  StorageAuthority  Suite 
software,  which  manages  multi¬ 
vendor  storage  resources. 

VERITAS  SOFTWARE  tomor¬ 
row  plans  to  launch  Data  Life- 
cycle  Manager  5.0,  which  can 
move  data  to  secondary  and 
archival  storage  systems  based 
on  the  information’s  age. 


completion  in  mid-2004.  Bank 
of  America  officials  are  peg¬ 
ging  a  late  2005  deadline  for 
finishing  the  integration  of  the 
companies,  she  said. 

Eckenrode  and  Bill  Bradway, 
an  analyst  at  Financial  Insights 
in  Framingham,  Mass.,  both 
said  there’s  little  overlap  in  the 
banks’  IT  systems.  However, 
both  Bank  of  America  and 
FleetBoston  use  a  customer 
information  system  from 
Hogan  Systems  Inc.  in  Dallas 
and  a  consumer-loan  origina¬ 
tion  system  developed  by 
American  Management  Sys¬ 
tems  Inc.  in  Fairfax,  Va. 

Although  both  Bank  of 


1,500  UPS  offices  worldwide. 

Information  life-cycle  man¬ 
agement  was  one  of  the  most 
talked-about  topics  at  last 
week’s  conference,  which  was 
co-sponsored  by  Computer- 
world  and  the  San  Francisco- 
based  Storage  Networking  In¬ 
dustry  Association  and  drew 
more  than  2,600  attendees. 

During  one  packed  session, 
11%  of  the  audience  indicated 
via  electronic  polling  devices 
that  they  have  already  in¬ 
stalled  information  life-cycle 
management  components. 
Thirty-three  percent  said  they 
plan  to  begin  deployments  in 
the  next  12  months,  and  anoth¬ 
er  30%  said  they  would  do  so 
within  two  years. 

Top  storage  vendors  such  as 
EMC  Corp.,  Hewlett-Packard 
Co.,  Hitachi  Data  Systems 
Corp.  and  Veritas  Software 
Corp.  have  announced  infor¬ 
mation  life-cycle  management 
software  or  have  said  they’re 
developing  technology  that’s 
designed  to  support  automat¬ 
ed  storage  management  ap¬ 
proaches  (see  box). 

But  Steve  Duplessie,  an  ana¬ 
lyst  at  The  Enterprise  Storage 
Group  Inc.  in  Milford,  Mass., 


America  and  FleetBoston  have 
engaged  in  offshore  applica¬ 
tion  maintenance,  each  has  a 
history  of  proprietary  applica¬ 
tion  development,  “and  I  don’t 
see  that  changing  anytime 
soon,”  Eckenrode  said. 

But  Bradway  said  that  as  sys¬ 
tems  consolidation  and  con¬ 
version  work  proceeds,  the 
need  to  retain  two  application 
development  and  maintenance 
teams  will  be  reduced. 


said  information  life-cycle 
management  currently  is  little 
more  than  marketing  jargon 
without  real  products  to  back 
up  the  promises  of  vendors. 

Mark  Lewis,  EMC’s  chief 
technology  officer,  acknowl¬ 
edged  that  the  technology  is 
still  in  the  early  stages  of  de¬ 
velopment.  “We  don’t  think 
anyone  is  doing  it  well,”  he 
said  during  a  press  briefing. 
“We  don’t  think  we’re  doing  it 
well,  at  least  not  yet.” 

First  Data  Corp.  in  Green¬ 
wood  Village,  Colo.,  is  one 
convert.  Jerome  Wendt,  a  se¬ 
nior  storage  analyst  at  First 
Data,  said  he’s  already  plan¬ 
ning  the  payment-processing 
company’s  information  life- 
cycle  management  strategy, 
which  will  include  the  use  of 
storage  virtualization  software 
that  can  pool  disk  capacity  on 
storage-area  networks  (SAN). 

Wendt  is  also  testing  tools 
from  EMC,  Veritas  and  Fujitsu 
Software  Technology  Corp. 
that  he  hopes  will  give  him 
better  data  about  the  usage  of 
storage  capacity  on  servers 
and  disk  arrays  than  his  exist¬ 
ing  spreadsheet  models. 

Automated  storage  manage- 


Bank  of  America  said  Eu¬ 
gene  McQuade,  FleetBoston’s 
president,  will  hold  a  similar 
job  at  the  combined  company 
and  will  have  overall  responsi¬ 
bility  for  IT.  But  the  spokes¬ 
woman  said  a  CIO  probably 
won’t  be  chosen  until  mid- 
2004.  Tim  Arnoult  is  the  top 
IT  executive  at  Bank  of  Amer¬ 
ica,  and  Joseph  Smialowski  is 
his  counterpart  at  FleetBos¬ 
ton.  042514 


ment  systems  would  ease 
headaches  for  IT  managers 
charged  with  destroying  old 
data  that  no  longer  has  to  be 
kept  to  satisfy  government 
regulators,  Wendt  said.  As 
part  of  his  plan,  Wendt  is  clas¬ 
sifying  First  Data’s  informa¬ 
tion  to  specify  the  storage  me¬ 
dia  to  be  used  for  different 
data  during  its  life  cycle. 

First  Data  also  plans  to  de¬ 
ploy  several  tiers  of  storage, 
including  arrays  with  low-cost 
disks  that  can  provide  sec¬ 
ondary  repositories  for  near¬ 
line  storage.  “By  doing  that, 
you  free  up  space  on  [your  pri¬ 
mary]  storage  for  mission-crit¬ 
ical  databases,”  Wendt  said. 

But  for  many  other  users, 
information  life-cycle  manage¬ 
ment  implementations  won’t 
happen  anytime  soon. 

Jerry  McElhatton,  senior  ex¬ 
ecutive  vice  president  of  glob¬ 
al  technology  and  operations 
at  MasterCard  International 
Inc.  in  Purchase,  N.Y.,  had  a 
blunt  message  for  vendors. 
“Come  back  to  us  when  you 
have  something  meaningful 
that  will  serve  a  business  need 
and  demonstrate  a  purpose,” 
he  said.  ©  42478 


Key  Facts  and  Figures 

BANK  OF  AMERICA 

FLEETBOSTON 

Total  assets 

S737.1B 

S196.4B 

Annual  IT  spending 

S2.75B* 

About  SIB* 

Top  IT  executive 

Tim  Arnoult 

Joseph  .Smialowski 

Number  of  IT  workers 

2,200 

1,700 

•  ESTIMATE  BY  TOWERGROUP,  NEEDHAM,  MASS. 
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Businessy  IT 

A  READER  WRITES:  “I  am  tired  of  reading  about  my  job 
possibly  moving  overseas!  When  are  you  going  to  write 
about  how  American  IT  workers  can  best  prepare  for 
that  inevitability?  What  IT  jobs  will  be  available  for  U.S. 
workers?  What  are  we  IT  people  supposed  to  do  —  be¬ 
come  dogcatchers?  A  humane  occupation,  but  I  did  not  go  college  to 
do  that!  I  want  to  know,  specifically,  what  kinds  of  jobs  will  be  left 
after  the  outsourcing  craze,  and  where  will  they  be?” 

What  kinds  of  jobs  will  be  left?  Business,  not  bits. 

And  where  will  they  be?  Everywhere  there’s  business. 


Sure,  that’s  an  oversimplification.  But  if  you 
boil  down  everything  that’s  happened  in  IT 
over  the  past  few  years,  this  is  it:  Anything  in  IT 
that  doesn’t  directly  engage  the  business  your 
company  is  in  is  unlikely  to  survive. 

That  includes  pure  programming.  And  pure 
network  management.  And  pure  machine  oper¬ 
ation.  And  every  other  IT-shop  job  that’s  pure 
technology. 

In  fact,  any  job  that’s  exactly  the  same  in 
every  IT  shop  is  a  candidate  for  outsourcing. 

OK,  slice  away  that  IT  work.  What’s  left? 

All  the  jobs  that  aren’t  pure  IT.  The  “busi¬ 
nessy”  IT  jobs.  The  ones  that  require  meeting 
with  users.  And  listening  to  users.  And  under¬ 
standing  users  —  and  the  business. 

Sometimes  those  jobs  have  the  same  names 
as  the  pure-IT  jobs.  But  we  all  know  the  differ¬ 
ence.  When  a  programmer/analyst  turns  re¬ 
quirements  into  code,  that’s  pure  IT.  But  when  a 
programmer/analyst  manages  to  tease  out  re¬ 
quirements  from  users  that  they  weren’t  able  to 
articulate,  that’s  not  pure  IT.  It’s  a  little  listen¬ 
ing,  a  little  psychology,  a  little  sweet-talking,  a 
little  imagineering  —  and,  of  course,  a  lot  of  IT 
understanding. 

When  a  systems  or  network  ad¬ 
ministrator  calculates  capacity  and 
optimizes  how  the  servers  and  net¬ 
works  run,  that’s  pure  IT.  But  when 
someone  with  the  same  title  locates 
and  clears  a  recurring  trouble  spot 
for  salespeople  or  looks  ahead  to 
avoid  a  holiday  order-fulfillment 
bottleneck,  that’s  using  IT  to  make 
the  business  work  better. 

When  a  support  tech  answers  a 
technical  question,  that’s  pure  IT. 

When  that  tech  removes  a  problem 
or  a  glitch  that’s  interfering  with  a 
user’s  ability  to  extract  money  from 


customers’  pockets  —  well,  that’s  what  business 
is  all  about. 

The  big  difference  isn’t  in  how  technical  the 
jobs  will  be.  No  business  needs  an  IT  depart¬ 
ment  that’s  dumbed  down.  Businesses  need  IT 
shops  that  are  just  as  smart  about  technology  — 
and  a  lot  smarter  about  business  and  users. 

In  other  words,  we  have  to  think  like  IT  peo¬ 
ple  and  users. 

That  may  be  the  single  hardest  thing  for 
many  IT  people  to  accept.  For  those  of  us  who 
define  ourselves  in  terms  of  technology,  users 
are  the  “them”  to  our  “us.”  We  take  pride  in  the 
fact  that  we’re  different  from  users. 

But  in  the  future,  what  will  get  us  jobs  is  the 
fact  that  we’re  like  them.  And  we  understand 
them.  And  we  can  help  them  stay  focused  on 
business. 

Of  course,  you  probably  didn’t  go  to  college 
for  business  any  more  than  you  did  for  dog- 
catching.  You  went  for  technology,  right?  So  you 
face  a  choice.  The  edge  your  education  gave 
you  is  no  longer  enough.  Offshore  program¬ 
mers  and  techs  have  educations  that  are  just  as 
good,  but  they’ve  got  a  lower  cost  structure. 
When  it  comes  to  bits,  you’ve  been  underbid. 

So  you  can  either  resign  yourself 
to  being  another  IT  commodity  — 
or  raise  your  value  by  becoming  a 
businessy  IT  person. 

Doing  that  will  mean  work.  And 
change.  And  new  ideas.  You  won’t 
be  as  good  at  it  as  you’ve  become  at 
pure  IT,  at  least  not  at  first.  But  if 
you  can  do  it,  you  won’t  just  keep 
your  job.  You’ll  gain  a  whole  new 
understanding  of  how  technology 
works  in  a  business. 

After  all,  it  really  isn’t  “business, 
not  bits.” 

It’s  business  and  bits.  ©  42467 


frank  haves.  Computer- 
world's  senior  news  colum¬ 
nist,  has  covered  IT  for  more 
than  20  years.  Contact  him  at 

frank.hayes@computerworld.com. 


Sign  of  a  True  Professional 

High-priced  management  consultants  need  some  in¬ 
formation  at  this  hospital,  so  they  ask  IT  pilot  fish  to 
run  reports  and  watch  as  he  signs  onto  the  30-year- 
old  system  through  a  PC  terminal  emulator.  “But  I’ve 
worked  with  this  system  for  almost  10  years  and  go 
through  the  menus  rapidly,  printing  off  the  information 
they  asked  for,"  fish  says.  One  consultant  comments 
approvingly  that  fish  has  worked  for  five  minutes  and 
never  touched  the  mouse  -  the  sign  of  a  true  profes¬ 
sional.  FishSiuckles,  “I  didn't  tell  them  that  the  sys¬ 
tem  was  so  old  it  didn’t  recognize  the  mouse.” 


Oops! 

Urgent  call 
comes  to  IT  pi¬ 
lot  fish  from  this 
user,  who  says 
his  printer  “just 
stopped.”  “I  couldn’t  fig¬ 
ure  how  it  ever  worked," 
fish  says.  “It  had  no 
printer  drivers  for  that 
network  printer.”  Turns 
out  user  wanted  to  stop 
printing  a  large  file,  so 
he  decided  to  delete  the 
job.  “I  reinstalled  the 
printer  driver,”  says  fish, 
“but  when  I  explained  to 
him  that  it  doesn’t  work 
too  well  if  you  delete  the 
driver  while  it’s  printing, 
he  just  left  the  room.” 

None  of  the  Above 

This  computer-based 
training  system  is 
screwy,  manager  tells 
IT  pilot  fish.  A  new  hire 
scored  79%,  with  80% 
as  a  passing  grade,  so 
other  workers  pitched  in 
to  help  her  when  she  re¬ 
tested  SHer  grade  on 
the  retest  was  70%,” 
says  fish.  “A  third  try, 
with  even  more  co-work¬ 
ers  adding  input,  came 
out  to  65%.”  An  hour 
later,  with  no  help,  she 
passes  the  test.  Rather 
than  fixinqMie  system, 
“now  I’m  contemplating 
making  all  the  staffers 
who  ‘assisted*  her  retake 
the  test,”  says  fish. 


Not  the 

SHARK  Right 

YhUU  Question 

lANKlk  V  ^  1980s, 

and  senior  ex- 
;  ecs  throw  a  meet-and- 
j  greet  session  for  em- 
j  ployees  when  these  two 
j  computer  companies 
|  agree  to  merge.  “This 
i  was  very  unusual,”  says 
j  IT  pilot  fish,  “since  the 
j  senior  execs  are  as  im- 
j  perious  a  group  as  you 
j  could  ever  imagine.” 
j  Fish  recognizes  the 
i  chairman  and  CEO  and 
j  introduces  his  team. 

!  “We  do  systems  man- 
j  agement  in  corporate 
j  operations  IT,"  fish  ex- 
j  plains.  Big  cheese  hesi¬ 


tates  a  moment,  then 
asks,  “What  is  IT?” 


i  The  Power 
!  Of  the  Internet 

j  Electricity  to  this  uni- 
j  versity  building  must 
|  be  shut  down  while  elec- 
j  tricians  move  power 
j  lines  (ISds  One  grad- 
i  uate  student  asks  pilot 
j  fish  for  a  flashlight  so 
I  she  can  continue  work- 
j  ing  on  her  laptop  in  her 
j  office.  You’li  need  to 
j  run  on  your  laptop’s 
i  batteries  while  the 
;  power  is  off,  fish  ex- 
i  plains  dubiously.  “Oh, 
j  I  don’t  need  power,” 

I  she  tells  him.  “I  use 
:  the  Internet.” 


OFEED  THE  SHARK!  Send  your  true  tales  of  IT  life  to 
sharky@computerworld.com.  You  snag  a  snazzy 
Shark  shirt  if  we  use  it.  And  check  out  the  daily  feed,  browse 
the  Sharkives  and  sign  up  for  Shark  Tank  home  delivery  at 

computerworld.com/sharky. 
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Your  IT  budgets  and  staff  have  been  slashed. 
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Connect.  Any  Way  You  Want. 


Fortunately  you  have  the  most  manageable 

video  conferencing  systems  in  the  world 


With  IT  resources  scarcer  than  ever,  you  need  Polycom's  integrated  video  conferencing 
systems.  They're  user  friendly,  easy  to  upgrade,  manage  and  maintain.  Deployment  is 
virtually  "plug  and  play."  And,  monitoring  and  management  is  centralized.  It  all  adds  up 
to  a  great  ROI  foryourteam  and  your  company.  Join  the  millions  of  people  worldwide  that 
already  use  Polycom  and  The  Polycom  Office!”  With  integrated  video,  voice,  data,  and 
Web  applications,  The  Polycom  Office  makes  communicating  as  natural  as  being  there. 


For  more  information  and  your  free  white  paper  "Demystifying  IP  Migration"  visit 
www.polycom.com  or  call  1-877-POLYCOM.  Ask  about  the  outstanding  new  Polycom 
VSX“  7000  -  video  conferencing  like  you've  never  seen  it.  Polycom.  The  time  for 
manageable  video  conferencing  is  now.  .  v-C  V  r'^': 
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POLYCOM 


©2003  Polycom,  Inc.  All  rights  reserved.  Polycom  and  the  Polycom  logo  are  registered  trademarks  and  V$X,  Polycom  Office 
and  the  SoundStation  industrial  design  are  trademarks  of  Polycom,  Inc.  in  the  U.S.  and  various  countries. 
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Oracle  Database 


Oracle  Standard  Edition  One 
$5995  For  One  CPU 
Or  $195  Per  User 


* 


oracle.com/standardedition 
or  call  1.800.633.1620 


Limitations  and  restrictions  apply.  Licensing  of  Oracle  Standard  Edition  One  is  permitted  only  on  servers  that  have  a  maximum  capacity  of  1  CPU  per  server. 
Standard  Edition  One  is  also  available  with  Named  User  Plus  licensing  at  $195  per  user  with  a  minimum  of  five  users.  For  more  information,  visit  oracle.com/standardedition 

Copyright  ©  2003,  Oracle  Corporation.  All  rights  reserved.  Oracle  is  a  registered  trademark  of  Oracle  Corporation  and/or  its  affiliates.  Other  names  may  be  trademarks  of  their  respective  owners. 


